rshfamily.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:59:db:0b:b8:da:9d:10:26:70:b7:7f:72:68:62:a4:a8:7f was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rshfamily.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:59:db:0b:b8:da:9d:10:26:70:b7:7f:72:68:62:a4:a8:7fSerial Number (int): 291913150246870318818283118860355405916287
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 33:2e:67:bb:d7:ad:5b:52:ea:dc:ca:d6:61:b1:11:24:90:3f:00:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d3:46:5f:42:c0:53:0c:f0:69:2d:69:17:73:cf:91:5d:cf:89:68:56
Fingerprint (sha256): 42:39:c1:17:68:c6:3a:e9:88:67:2f:82:08:d3:b1:aa:0f:28:e7:5a:f8:24:c6:50:b0:89:e6:e1:8e:a3:9c:95
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate rshfamily.net
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rshfamily.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dav.rshfamily.net
jd.rshfamily.net
rshfamily.net
www.rshfamily.net
jd.rshfamily.net
rshfamily.net
www.rshfamily.net
Other certificates including the domain name rshfamily.net
(limited to 100 certificates)
rshfamily.net
rshfamily.net
dav.rshfamily.net
www.rshfamily.net
dav.rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
dav.rshfamily.net
rshfamily.net
rshfamily.net
dav.rshfamily.net
rshfamily.net
dav.rshfamily.net
dav.rshfamily.net
rshfamily.net
rshfamily.net
www.rshfamily.net
www.rshfamily.net
www.rshfamily.net
dav.rshfamily.net
rshfamily.net
www.rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
www.rshfamily.net
dav.rshfamily.net
rshfamily.net
dav.rshfamily.net
www.rshfamily.net
dav.rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
dav.rshfamily.net
rshfamily.net
rshfamily.net
dav.rshfamily.net
rshfamily.net
dav.rshfamily.net
dav.rshfamily.net
rshfamily.net
rshfamily.net
www.rshfamily.net
www.rshfamily.net
www.rshfamily.net
dav.rshfamily.net
rshfamily.net
www.rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
rshfamily.net
www.rshfamily.net
dav.rshfamily.net
Certificate
The complete raw certificate details for rshfamily.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISA1nbC7janRAmcLd/cmhipKh/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjExMjQxNTM0MDBaFw0x NzAyMjIxNTM0MDBaMBgxFjAUBgNVBAMTDXJzaGZhbWlseS5uZXQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NKjuzS2WONv1R1RN+wNNZDoJL/L7Rz95 EZi+ktXbLptjYGhEB8ed6FbkJ/7HTEegThVWN+1fov5C7uPwqV2hOgxJRAOtEUKc GydO9bQjuP2R+jraAbMFLWjaFZUOk8huIZ2EpptdzPeequJ4kIj3WsA9HIHdfGOD h7AqmYThNM5w1rGmU+oXbP7S+7baJKcKMsHlthtcZvMoh3AgGH7S1ZeHxzvPETjL 8yQ69wdIdJOkz8oJAxjLR0SM6a2PLDjiG45HB5OBHGPX1JfWOujFPmEP3LuXOb5Y vUr6EPOmPyEcQeoYEh+Ii/gXLC+UnuRBrgEav5AAUe8cKcpp712RAgMBAAGjggJG MIICQjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDMuZ7vXrVtS6tzK1mGxESSQPwCM MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsGAQUFBwEBBGQw YjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMFAGA1UdEQRJMEeCEWRhdi5yc2hmYW1pbHkubmV0ghBqZC5yc2hmYW1pbHku bmV0gg1yc2hmYW1pbHkubmV0ghF3d3cucnNoZmFtaWx5Lm5ldDCB/gYDVR0gBIH2 MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMg Q2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQ YXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNh dGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9z aXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQCQr7G2o/zengIEYAFcbQeGYWHElRAT wOGfpBQ5wl4cqLllqT4XhfxoWEWCziwoXPhv5ORT27WVeUBa/4Bv4Lvi6aG4RYiI 8Y1kqL3clP03U1ewMFc6wSRtdPgN8PvSImtZxHefQx9BLsP4E/kFRLNJ8OLgh8wN t5SjFbvvcq4SGKpP4C6SFU8V9ApbRWUgb1voZhROypIgde2fdgpwyXF34smmR3Zc s41SAF9R+q+jZfLXtgX8QPBqcxVXVL5/+sIbJP1u7cqBrf935o6SbjGNQlM3tD9m KGsY65YgC8T0XFBQZTq38AT2qU9WKS6SuIGMLxkP0iBuw/wzOWJqfQS+ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjSo7s0tljjb9UdUTfsD TWQ6CS/y+0c/eRGYvpLV2y6bY2BoRAfHnehW5Cf+x0xHoE4VVjftX6L+Qu7j8Kld oToMSUQDrRFCnBsnTvW0I7j9kfo62gGzBS1o2hWVDpPIbiGdhKabXcz3nqrieJCI 91rAPRyB3Xxjg4ewKpmE4TTOcNaxplPqF2z+0vu22iSnCjLB5bYbXGbzKIdwIBh+ 0tWXh8c7zxE4y/MkOvcHSHSTpM/KCQMYy0dEjOmtjyw44huORweTgRxj19SX1jro xT5hD9y7lzm+WL1K+hDzpj8hHEHqGBIfiIv4FywvlJ7kQa4BGr+QAFHvHCnKae9d kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 291913150246870318818283118860355405916287 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-24 15:34:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-22 15:34:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rshfamily.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23001339065290253221705878913890535702286882211707462174633255788741806384250569638780799796393943123242376529149860317345776688737335780819656705442577506472505941072909641938722920444446168839057927673219482422850115999265870459571197856797886381689858644445971212763439849513116211118676355488961640958483971822031464022122581078338740683871408378406134415451670000102552349819468133684139389208990114097505002773694928645146900507796593797845318758280617804982432092585368192795464599831417558606104256597698829705325002389829929763170528343326363678048358203322117165225545561090062270391617975834966575658524049 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 332e67bbd7ad5b52eadccad661b11124903f008c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.rshfamily.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jd.rshfamily.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rshfamily.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rshfamily.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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