benchflex.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:41:e6:04:e4:df:e5:47:ca:70:d0:52:36:7c:d9:20:37 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=benchflex.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:41:e6:04:e4:df:e5:47:ca:70:d0:52:36:7c:d9:20:37
Serial Number (int): 318591889585264836151896136071088168312887
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:66:4c:a3:28:2d:ca:29:bd:28:44:b3:72:63:8a:1b:dc:eb:65:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:ac:9c:de:3c:f6:89:2d:53:2b:66:12:fb:84:2a:b5:cb:5b:a2:33
Fingerprint (sha256): 49:81:cf:da:62:89:3b:8c:b4:3d:b1:f8:3b:1b:17:49:31:1b:40:57:db:fe:8c:f7:7a:96:6e:66:db:fb:d7:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate benchflex.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benchflex.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benchflex.com

Other certificates including the domain name benchflex.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for benchflex.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISA6hB5gTk3+VHynDQUjZ82SA3MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjEyMTExMjhaFw0y
MDA1MjEyMTExMjhaMBgxFjAUBgNVBAMTDWJlbmNoZmxleC5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDJqBIUeioTjIPqoq1tgRj58tW26u/cJOlp
EK+auZ+R61JIMLw84QRjt0KzDoKHiR+aNmrkExbjmskPFWomVdoHZlByW5TqhBg7
thFgrLyHn8HeiaNt2nZQStyDad8BuAcsluqIvIJAJMiAr9EfnQfQMsWtgPmCvZgh
qjiUCW8dpYzb40Il/YNjVBo8HY0d9T0ZIkM+nxKIFbQEpuq4/l7SmnO4Xk/3Nm7Z
tvJkc3kOF9rdmt2b2f3DMLYU34Tr6iH+qjjnP3gzGSYv5OEVfbj/39Vt3pKdA0ek
NOd/vEOHEP80JZVlDRyR9YwkcJRpMMq5ifM4Uwcq08m3DWPHORS/KGyA8pUh80cw
h1ZETPk2KQ1H+YYY88jOqCMrsmVYRrtDKTzNfEBPJ2Q77iT89bsiKLODIHnHlP31
fWyv9bAlTfA6JSG+ys7hhrPWxmJQwPFRHucd/YaZcjWx5VCG8vFv+hZqOe/zrari
L6tfI7NrQe4ntfbsUet0cmBzJuRUVGz7n0rhzI9rHV6I5SNMEXr/U+giWzDcfEKN
6pXq/fDZNT8tHTxGSBMtPoefXhf45ymYG7Ah3ulusIacNOXJ1C8Y3wuSmYOF7Nnr
wbmDnJYdnOCah5yD2rH9XXhY8GosnNXA6FD5kkTFE0Bndha7tRcAsFhXkRG+1y39
wAFT6CypAwIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTiZkyj
KC3KKb0oRLNyY4ob3Otl4zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWJlbmNoZmxleC5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXBpzjtNAAAE
AwBHMEUCIQDlFIs1qL90HM5G1kdEXIiimSimSWYrbQRJ555vcZ8j2AIgVm1nlQ6p
ul9Y8QfGB28latY2vSqqlcH7EEpk0qDJtwEAdgCyHgXMi6LNiiBOh2b5K7mKJSBn
a9r6cOeySVMt74uQXgAAAXBpzjtjAAAEAwBHMEUCIBBEObgqYQ8iMpDN8NT0hFij
fZXf04CSlT6KtbkvjspOAiEA/UWnx8JF/GJP9yE4nLWDZEPE5SV/jdE0uY5sy6kf
LfIwDQYJKoZIhvcNAQELBQADggEBABWu60wsWL6cvB3zXqXNCkxlpQ8YYo+MJ7hB
xTTKKbJYQRvBGWQozcYSV0lgnNnQOad5y1EYnQv2Sj8IbyKgk5Bd3WG5BMywjPA1
++PhnbuYntKXihdzBMg+BiiOC89rNUZYnQgiiSRQ9riPCzy3WwcXfgNFRlPDs1oA
5vEiqFeY14q5F2u6B+PPniksFvgxFUu1SvWoo8uP4SwOd4T14rgZHZ3+Sw00r780
Z58O3wSNn3FgcQzETm1OI7WeHQ3nNSaEfTxI0Hqkns8XOkBWCGkNtp/Mx/HHEUma
WtuLZkE9ew1mY7APpdTArMg8D/Vcj1DPM55c7vdWXMLjgiF3cy8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318591889585264836151896136071088168312887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 21:11:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 21:11:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benchflex.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822686849578747344393588385142184303666764878075697154106155099017110864145618426013603992639915948383306078958994577885947031842956653626485161150211887770109753778494198984237283496376665148668823399449271989301630260874374645715389785611539220749843628628102718968701878475931892326119136495159994763723929658859395412944011310526032610735086564192792395347088112622310104459539020850632019732491734585888497231577185717361910324727541873552543721087023631553146091797286248284203427964874257006632678237858046484134878189757655918608769695860940976371562627531952006202925920990936976442466570308021173646410044664911492607375327317892909646864250481428723694033669668001586660505670182712455079855314562078549540484697170675915093793785172297137246583452731568702117353507822858215153973716888996715469973395176531748737784809894969238255663347239671115576079916689919826817258340620108003334008811233361625368674835776956026973866777636794126409978915894255863448382144522883722065270924643274858645248175139838071579524765985967551584840679510330590453000906734790918228458926228060167687171413310786532237734257767947978447274961542785961507859055077038644000510548848883828808166790432915543729631149209921565212263620323587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2664ca3282dca29bd2844b372638a1bdceb65e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchflex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017069ce3b4d0000040300473045022100e5148b35a8bf741cce46d647445c88a29928a649662b6d0449e79e6f719f23d80220566d67950ea9ba5f58f107c6076f256ad636bd2aaa95c1fb104a64d2a0c9b701007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017069ce3b6300000403004730450220104439b82a610f223290cdf0d4f48458a37d95dfd38092953e8ab5b92f8eca4e022100fd45a7c7c245fc624ff721389cb5836443c4e5257f8dd134b98e6ccba91f2df2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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