voip.rockymountainroll.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ac:3a:12:4c:f9:6f:7a:d1:47:a3:3c:71:6f:26:6c:bc:6b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=voip.rockymountainroll.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ac:3a:12:4c:f9:6f:7a:d1:47:a3:3c:71:6f:26:6c:bc:6b
Serial Number (int): 407054901083766824706636775565034485759083
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 70:04:49:79:d9:12:dd:68:11:40:c5:0c:3a:20:81:0e:e3:5c:5e:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:f0:50:6b:95:c2:b8:6b:45:be:18:c9:a9:c6:21:4a:8c:ca:ac:96
Fingerprint (sha256): 48:c2:4c:1a:f0:77:19:5f:c1:df:13:d3:f6:11:08:e9:90:cc:a4:d7:d4:21:b0:e7:60:cc:d3:03:f7:f6:61:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate voip.rockymountainroll.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for voip.rockymountainroll.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

voip.rockymountainroll.com

Other certificates including the domain name rockymountainroll.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for voip.rockymountainroll.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407054901083766824706636775565034485759083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 00:03:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 00:03:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'voip.rockymountainroll.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 960465497384079931271489542341785562180051157576677835389797525037891669618733465881250045872094118205393931005243787274926388880028439352386483942112791367381001891847400095160010463800866219233519246204055709011242797831803104679824844809702988895986631340980920833012852018525519502035821506477450520208830049026834762248200752864144445077457747690443189712258407483719272162028208166832291857018350248896151961243270264743656779123404878248285011750362026384310118446680415655106605382127844844642240760307777481595314114075666367685804015661619014505611762184900988515321151773775183813031325109137647893129164938732050923250647704964990738560952454233084970753315951643390882036414167404914555870418324862633358805401161969066370803294076489172857674265683451772944523149709466613344802641474686667091787277367241935477643774224342936045149159896830433338775969920682783385104029899077307894183967034025428346550180644813448334535332496489945824277073502582157342419083805827785593748336858172301237619893078026582988893049145147111956722262862974844102628146113945979240602553744521039038025379298244263179471254864463465271031064995610431523789242277682415350186392338949228343778245364563704016524433594581984394035867631903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70044979d912dd681140c50c3a20810ee35c5ead
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voip.rockymountainroll.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000171619c9e4400000403004730450220413e2a1d191ec8bd6b77679f007a0426f8027482292fee26d24e55412a9510e2022100c092bd93cbd8a4804474983bf4e76f27ed9cba8e7368e69620e6b441f49be0a2007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171619c9e310000040300473045022066cd8dfa68fd6736deb02ce35e6be5d0857f825b2d18d8338b62c39d4b589f6f022100d096b40f955d2eb03096df3ab03d1402cedd74cb37fc226399366ef303b18f4d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0009ea2439f61d87568346b6db493f0d1ed8795730f845bfc09c8a495d3b83f942c9d53097c69629dbd2f62bff05a93b10140b8b91743dbb338a80b61544bd0c07c12ff5adc32aa7bbcb21de0ed055e6a49971c480e59a877014797a617cbef3c24b45ca7b68985c42dcc45e1cd69fd4fb1a1fb72f579652637d666916c9c7fc1fe8f27d8bdccc4eb470baf2917318db937325115f729f298b664e923045b2e85be61b256de6e443b37316d4c81b487f44eaa7fba7f39ef1450a8b9f3fb5e80d774fd1cb5e7ea76123be09c33e68b0aeb568f111b412a9d94c58a214ab2f9b7bffa8e6efa674b58b5284286ceb4c81c9c0f538808914c50a3871955f584a8e86ac