www.boxmann.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:40:98:64:8c:8d:02:2c:0a:ef:3d:11:51:9d:3b:d5:76:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.boxmann.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:98:64:8c:8d:02:2c:0a:ef:3d:11:51:9d:3b:d5:76:25
Serial Number (int): 283317494013975149937109578843512408208933
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:84:77:e9:3d:fa:7c:da:3a:63:5b:32:c9:b5:72:13:e9:0c:2a:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 56:e1:8d:d9:6f:d4:40:3f:5e:ad:ee:5c:d1:31:55:98:25:03:e5:a0
Fingerprint (sha256): 41:cc:a1:3e:1e:79:b5:86:9b:a2:02:0d:b0:f8:cc:e4:cb:6b:9d:3c:22:0b:ea:ba:06:c1:ee:0d:3f:71:6e:71

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.boxmann.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.boxmann.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.boxmann.com

Other certificates including the domain name boxmann.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.boxmann.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283317494013975149937109578843512408208933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 01:46:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 01:46:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.boxmann.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811469301987748280346523202234614700501633919876415359682331202946266248345154725518549612480878202739744871368030817924800607441519233017291141411258025648635466774736111025735267301605835944156193264067798386963318395661046592018701443542651907971804090366037942713124895697568591680846749318831793726404529882558269563621448888208026775004521193268104143447875847019130667321438704175214086438769116977018813326453549771273079342887292757481781875183238080813621367432699301313761197555138863613378177652324546368490963162243618829670271705809472546052310582904305456527937126152933992439312052216850236256236150444148164481762060441955078978821439878089505163290458010228785745496685938164678919386988290003750697343734789529439404067165755910682773538202109239857071072487143897382785197831075704226679444103176231484998965195847148043649574199484902980448954627747778244401779154483148827769636402572752348818818198168889610052280483446041086054923535291132318476544313685259882674666114684915032825751181754869359890129299873413984919801693004011534217712466991026513239354538822266763311519921886573914965151639182633550383863020167977736646821217296932813499262528312209993541413691631245175189327359188195453517403230199743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							068477e93dfa7cda3a635b32c9b57213e90c2a22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxmann.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aece18c7f0000040300473045022100b437ea3a3352c112335c764ab246fa82cbc8560f7f37c6293b17fb583aa6ed1802202598bdfb441d4adda2f4b9ff712867e677bfddf5cdc7cdccd145ff8846e74392007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aece18c7e000004030046304402202a9e4ba19e809535a080c2ad53cc0dd583b651892dbbb4490e7f21ce717f9fdb022053c6e80d7c2528d656d41b6d9773ab6e28cbf01ee630e4222278f02bd0977ba7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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