museumstore.columbusmuseum.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:5d:a5:ff:ab:27:5a:00:b0:52:3e:bc:8d:4f:fa:38:4c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=museumstore.columbusmuseum.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:5d:a5:ff:ab:27:5a:00:b0:52:3e:bc:8d:4f:fa:38:4c
Serial Number (int): 296170139339380762078949181001937486231628
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:0a:1c:74:2e:98:b3:e9:70:c4:19:7e:71:47:85:38:07:07:2c:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:5c:42:9b:61:32:ef:9c:50:f3:db:c8:c9:6a:3e:fe:41:16:51:21
Fingerprint (sha256): 3d:95:9e:9d:0a:8c:48:8e:2b:bf:48:f8:b5:4a:c3:13:ad:e3:fb:f3:ce:9e:73:f0:28:b0:54:34:f7:06:a1:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate museumstore.columbusmuseum.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for museumstore.columbusmuseum.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

museumstore.columbusmuseum.org

Other certificates including the domain name columbusmuseum.org

(limited to 100 certificates)
www.columbusmuseum.org
www.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
alexa.columbusmuseum.org
pizzuti.columbusmuseum.org
pizzuti.columbusmuseum.org
www.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
www.columbusmuseum.org
columbusmuseum.org
alexa.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
mycma.columbusmuseum.org
pizzuti.columbusmuseum.org
pizzuti.columbusmuseum.org
columbusmuseum.org
museumstore.columbusmuseum.org
pizzuti.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
columbusmuseum.org
www.columbusmuseum.org
alexa.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
columbusmuseum.org
museumstore.columbusmuseum.org
www.columbusmuseum.org
www.columbusmuseum.org
columbusmuseum.org
museumstore.columbusmuseum.org
columbusmuseum.org
pizzuti.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
www.columbusmuseum.org
pizzuti.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
columbusmuseum.org
pizzuti.columbusmuseum.org
members.columbusmuseum.org
www.columbusmuseum.org

Certificate

The complete raw certificate details for museumstore.columbusmuseum.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISA2Zdpf+rJ1oAsFI+vI1P+jhMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MDQwMjE4MDBaFw0x
NzA3MDMwMjE4MDBaMCkxJzAlBgNVBAMTHm11c2V1bXN0b3JlLmNvbHVtYnVzbXVz
ZXVtLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANYoVegqacu3
O4d0zDlzR7WSKK47d+Jk2e6tahaIew6EQFm7FAKTwd4zHu/7Ca85aZVxTC7ORNc1
Z1iVt1zX1Jm7lbAz8K8+PYB7toHaOqlg9IsLIVYHs1f+sBjCMg4QXDeGfPFbjQvS
zs2I23dvQhZntv1EdSoTpcHlPg2V5C6+XrhBFUd/teSSfrWIivVG6Iy+c5P8lmL0
TteteGk4AHN4tnjWrjIdJm9PCOlA8nIYwjTd513hiaTdwuYVPMytKoT6wb4Hzude
V1QLXIFDi3IPxl4wper4h9cLimUHAWwwC4A8zROiYigZoowLRurn7p7wpqgROBBt
p77q7VzhjYsCAwEAAaOCAh8wggIbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUbgoc
dC6Ys+lwxBl+cUeFOAcHLAkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIebXVzZXVtc3RvcmUuY29s
dW1idXNtdXNldW0ub3JnMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE
AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi
ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj
b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0
cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD
ggEBAJmNDxGA0VReZ/CUQZz91N0FDjcFqCLlChiyjgthT+iFKR+DOBVKFCft9kqr
xn/EO14cmeJNjonj7zR5r/psfCB9XFmbk0mbJw2BjJBm3LgrpWaYQG6/uy/UAIug
Kf/nIDFkbxwtkLYnoks9YBrDQhzI+P9HTOa2ofbwAe+Hk9itnRVT7wqeBblhYuN1
6STjJ5y7WNjXYfDGJEluqJGCm8OVlj66YsMdco29jYXuTppXHxU9W/DrsrxKjmgx
RnyTIVSKEf/gcZliAlaRq1G2l8YLxKRB4dMMlW3PZ0BHF8+dU8gdMtW2IZgmQ+wy
Ip+mUXkMBKQLIxMu9uuWMrLg5L8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ihV6Cppy7c7h3TMOXNH
tZIorjt34mTZ7q1qFoh7DoRAWbsUApPB3jMe7/sJrzlplXFMLs5E1zVnWJW3XNfU
mbuVsDPwrz49gHu2gdo6qWD0iwshVgezV/6wGMIyDhBcN4Z88VuNC9LOzYjbd29C
Fme2/UR1KhOlweU+DZXkLr5euEEVR3+15JJ+tYiK9UbojL5zk/yWYvRO1614aTgA
c3i2eNauMh0mb08I6UDychjCNN3nXeGJpN3C5hU8zK0qhPrBvgfO515XVAtcgUOL
cg/GXjCl6viH1wuKZQcBbDALgDzNE6JiKBmijAtG6ufunvCmqBE4EG2nvurtXOGN
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296170139339380762078949181001937486231628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 02:18:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-03 02:18:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'museumstore.columbusmuseum.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27034887475504134174615952200221315344209756187754122730654024497922289161098525525572490193421704482573147834731252101961128709374138882262669800645703851004064631181978890908962565107369517822880750356366548901430937021082882359285838754092129768451333007399267386511846617953809436775106338109272146795096645980215962086712742522613640594735251364249165454509445282888421701839411411433494887930013410199275565723022278255654718659963254087806574821118151258448632897017976668496215557993464764861668775428084140843411214247479728327688347691467956060558283833974736320320712924444868970658646343368371581491449227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e0a1c742e98b3e970c4197e7147853807072c09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museumstore.columbusmuseum.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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