stocktonlocksmiths.com
Issued by R3
About this certificate
This digital certificate with serial number 04:bc:4b:a6:67:f8:e0:bc:fa:4a:b2:5b:e2:ef:d1:3e:94:d1 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=stocktonlocksmiths.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:bc:4b:a6:67:f8:e0:bc:fa:4a:b2:5b:e2:ef:d1:3e:94:d1Serial Number (int): 412522784837946129771347355929006804210897
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1f:2b:1f:e7:ce:79:f5:ff:45:aa:cc:5e:98:8e:f2:17:10:44:28:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ba:59:6e:70:52:66:e2:44:09:c2:e6:ea:50:0b:d7:b0:17:65:79:8f
Fingerprint (sha256): 46:17:60:f8:36:26:a9:cd:96:38:08:ad:d2:d6:7b:22:d6:d9:df:b2:f6:71:98:ec:73:7e:00:84:bc:4b:07:05
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate stocktonlocksmiths.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stocktonlocksmiths.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stocktonlocksmiths.com
www.stocktonlocksmiths.com
www.stocktonlocksmiths.com
Other certificates including the domain name stocktonlocksmiths.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for stocktonlocksmiths.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgISBLxLpmf44Lz6SrJb4u/RPpTRMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjIyMTA1MDhaFw0yNDAzMjEyMTA1MDdaMCExHzAdBgNVBAMT FnN0b2NrdG9ubG9ja3NtaXRocy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw ggIKAoICAQDV9qAuIbxhIPGpLq2JmtPHXE6+R6Ak67oH73BpE2Xro31qLk5qs0td S1X2rEgrtQ3b77Gw9Q69Fvb+LLpR9KhzSmCePFCAq8NYWOFDUqQ9rOvD/etVBvvu bc44U9sJV01hoTvD3TkiB0nOX12nAqg6RV78nAFnTgN3w/4dhruAghpKv7Nm2wbk 3Coy+WX66o5J1feww7qdn9p2y2a+8gZ5e27TaXFA9kwKPqSMYhgHSz2bLAI1O3jK bMVBPTCOoN50r3rNNmW5QWr+T5VPn278I3J0L8wzP9HtNDE0368v4Y+3oxeBzfID MpYWyzcgI/AJh/kLl7URTSnsSsgq+7JQD2ij/JsSx+iLLz9f2nBxPq5pufy1VSyW e27e0aLwtLErtr86ljiUMwjnWihsFN2tDczAMbvP/HRWGhKPpMlaGpv6D8Uh7NQ2 iyqu0cHzqqk/dSj+Nm3DAuod7lwnhb+4k/DXL3voURnB+sJqhuJ9PFvYc4uGSnHh JQRCG82BcKYpaXv/IDtvl7Ugdaofv/MBu/cguHCkeZ8mz7i1hb1aPe3SF+4iLlxg 9q/xDUtBcj9nMWU8UFQ2UzObBYO4325BwRA3aDVu7UFq70Ix/26XKY4W2YXZfiWk ssZHAze1eKYPwTSTUw6i1yh+OEN9pINp4wsusNY7/5FeOoWYnI8YdwIDAQABo4IC MzCCAi8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQfKx/nznn1/0WqzF6YjvIXEEQo +TAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzA9BgNVHREENjA0ghZzdG9ja3Rvbmxv Y2tzbWl0aHMuY29tghp3d3cuc3RvY2t0b25sb2Nrc21pdGhzLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw42vapkc0 D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjJOPkJEAAAQDAEcwRQIhAMKN6o1D IanGAEqwT3ygdSLCtScsvMtVpORghNg6acWXAiAqDvJI/9+8hOdAsZy6UTozDaSS UGhcZTznvVWvLdJZtgB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX AAABjJOPkKQAAAQDAEYwRAIgN0cDdmIs9iFEUmVI7OZZTH61CN2wSPp60GNS7AER Vk0CICkJaS8lfjbzR130XWV4K+CZp7DqqE3EkumEIjJD2hdgMA0GCSqGSIb3DQEB CwUAA4IBAQADGUCb8yZBNYsfMpyAth56IXYU8zskIUEn5RhWToxb1uZvez4HUcqs GDCQO8w/rMjh4jQd8TXFSZ1Kvs7Yg0FyFD+ttGEYGsDeyX3I5pqRvdSyrXk4Z7UH +nl1Xnvt/4gS6q/+jSkeqj8YNEVFANC3poYnU8/k0i68fXf+W0K4xtsfGlT2zhPg rSTf7pg7ks1PdcsVa9vxkAuPJMdLJJ2YoFWgtZP23T6Vu7hXDRcsJ0Oy2Uk3SMhA keykHoxhitTSt2vpvHh7duBYr1mKHUPOhPqIRT1fOVIl5Ls1wFmh/K6QKCrZHLNP 63iO6TYmLE3GN3u4WbFt5xVec0O1YX1+ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1fagLiG8YSDxqS6tiZrT x1xOvkegJOu6B+9waRNl66N9ai5OarNLXUtV9qxIK7UN2++xsPUOvRb2/iy6UfSo c0pgnjxQgKvDWFjhQ1KkPazrw/3rVQb77m3OOFPbCVdNYaE7w905IgdJzl9dpwKo OkVe/JwBZ04Dd8P+HYa7gIIaSr+zZtsG5NwqMvll+uqOSdX3sMO6nZ/adstmvvIG eXtu02lxQPZMCj6kjGIYB0s9mywCNTt4ymzFQT0wjqDedK96zTZluUFq/k+VT59u /CNydC/MMz/R7TQxNN+vL+GPt6MXgc3yAzKWFss3ICPwCYf5C5e1EU0p7ErIKvuy UA9oo/ybEsfoiy8/X9pwcT6uabn8tVUslntu3tGi8LSxK7a/OpY4lDMI51oobBTd rQ3MwDG7z/x0VhoSj6TJWhqb+g/FIezUNosqrtHB86qpP3Uo/jZtwwLqHe5cJ4W/ uJPw1y976FEZwfrCaobifTxb2HOLhkpx4SUEQhvNgXCmKWl7/yA7b5e1IHWqH7/z Abv3ILhwpHmfJs+4tYW9Wj3t0hfuIi5cYPav8Q1LQXI/ZzFlPFBUNlMzmwWDuN9u QcEQN2g1bu1Bau9CMf9ulymOFtmF2X4lpLLGRwM3tXimD8E0k1MOotcofjhDfaSD aeMLLrDWO/+RXjqFmJyPGHcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 412522784837946129771347355929006804210897 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 21:05:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 21:05:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stocktonlocksmiths.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872894440746093958207903147551811247022839180632722372690045922754041976803583646379826940885336548351811077658810399634957437274153942758024776241405137985891436235503873568351049557264380670125227786267068380340399119823687260630539677834904685234605044562573597773888028787173724877643750477738848700009587049123922218920228493770494253908642714211107405724960869843249896835940433665287833052444728455611163042535753160347228660057282977730713171216590672000627860819707407818293711843591318539642189857471826459243081488034894351712718483669120712339729991908299192245747462738456281707041505690348570362288343384084514956453831630978676036021076655352048620095330456445751118361431270048244527645567849899418469611831367471679547470034451400475557707907795205052125813422495474030534986404708222719169530312131812560890171067029703719218915390521919750434196125919287396223266645095407197707150696509753666942444925556914187082947751708928250977704424755571677390316816585689240665206437205861204960348649596623917476118144754237136082453220433644639634130938790253906697089834319447884500103416826339305661033373883710883253184502511816677136473833317005473139337648707511576835069842439766351283602651563132825939120174864503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1f2b1fe7ce79f5ff45aacc5e988ef217104428f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocktonlocksmiths.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stocktonlocksmiths.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c938f90910000040300473045022100c28dea8d4321a9c6004ab04f7ca07522c2b5272cbccb55a4e46084d83a69c59702202a0ef248ffdfbc84e740b19cba513a330da49250685c653ce7bd55af2dd259b60075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c938f90a40000040300463044022037470376622cf62144526548ece6594c7eb508ddb048fa7ad06352ec0111564d02202909692f257e36f3475df45d65782be099a7b0eaa84dc492e984223243da1760 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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