benchflex.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a8:41:e6:04:e4:df:e5:47:ca:70:d0:52:36:7c:d9:20:37 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=benchflex.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a8:41:e6:04:e4:df:e5:47:ca:70:d0:52:36:7c:d9:20:37Serial Number (int): 318591889585264836151896136071088168312887
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e2:66:4c:a3:28:2d:ca:29:bd:28:44:b3:72:63:8a:1b:dc:eb:65:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): dc:ac:9c:de:3c:f6:89:2d:53:2b:66:12:fb:84:2a:b5:cb:5b:a2:33
Fingerprint (sha256): 49:81:cf:da:62:89:3b:8c:b4:3d:b1:f8:3b:1b:17:49:31:1b:40:57:db:fe:8c:f7:7a:96:6e:66:db:fb:d7:17
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate benchflex.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for benchflex.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
benchflex.com
Other certificates including the domain name benchflex.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for benchflex.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISA6hB5gTk3+VHynDQUjZ82SA3MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjEyMTExMjhaFw0y MDA1MjEyMTExMjhaMBgxFjAUBgNVBAMTDWJlbmNoZmxleC5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDJqBIUeioTjIPqoq1tgRj58tW26u/cJOlp EK+auZ+R61JIMLw84QRjt0KzDoKHiR+aNmrkExbjmskPFWomVdoHZlByW5TqhBg7 thFgrLyHn8HeiaNt2nZQStyDad8BuAcsluqIvIJAJMiAr9EfnQfQMsWtgPmCvZgh qjiUCW8dpYzb40Il/YNjVBo8HY0d9T0ZIkM+nxKIFbQEpuq4/l7SmnO4Xk/3Nm7Z tvJkc3kOF9rdmt2b2f3DMLYU34Tr6iH+qjjnP3gzGSYv5OEVfbj/39Vt3pKdA0ek NOd/vEOHEP80JZVlDRyR9YwkcJRpMMq5ifM4Uwcq08m3DWPHORS/KGyA8pUh80cw h1ZETPk2KQ1H+YYY88jOqCMrsmVYRrtDKTzNfEBPJ2Q77iT89bsiKLODIHnHlP31 fWyv9bAlTfA6JSG+ys7hhrPWxmJQwPFRHucd/YaZcjWx5VCG8vFv+hZqOe/zrari L6tfI7NrQe4ntfbsUet0cmBzJuRUVGz7n0rhzI9rHV6I5SNMEXr/U+giWzDcfEKN 6pXq/fDZNT8tHTxGSBMtPoefXhf45ymYG7Ah3ulusIacNOXJ1C8Y3wuSmYOF7Nnr wbmDnJYdnOCah5yD2rH9XXhY8GosnNXA6FD5kkTFE0Bndha7tRcAsFhXkRG+1y39 wAFT6CypAwIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTiZkyj KC3KKb0oRLNyY4ob3Otl4zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWJlbmNoZmxleC5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXBpzjtNAAAE AwBHMEUCIQDlFIs1qL90HM5G1kdEXIiimSimSWYrbQRJ555vcZ8j2AIgVm1nlQ6p ul9Y8QfGB28latY2vSqqlcH7EEpk0qDJtwEAdgCyHgXMi6LNiiBOh2b5K7mKJSBn a9r6cOeySVMt74uQXgAAAXBpzjtjAAAEAwBHMEUCIBBEObgqYQ8iMpDN8NT0hFij fZXf04CSlT6KtbkvjspOAiEA/UWnx8JF/GJP9yE4nLWDZEPE5SV/jdE0uY5sy6kf LfIwDQYJKoZIhvcNAQELBQADggEBABWu60wsWL6cvB3zXqXNCkxlpQ8YYo+MJ7hB xTTKKbJYQRvBGWQozcYSV0lgnNnQOad5y1EYnQv2Sj8IbyKgk5Bd3WG5BMywjPA1 ++PhnbuYntKXihdzBMg+BiiOC89rNUZYnQgiiSRQ9riPCzy3WwcXfgNFRlPDs1oA 5vEiqFeY14q5F2u6B+PPniksFvgxFUu1SvWoo8uP4SwOd4T14rgZHZ3+Sw00r780 Z58O3wSNn3FgcQzETm1OI7WeHQ3nNSaEfTxI0Hqkns8XOkBWCGkNtp/Mx/HHEUma WtuLZkE9ew1mY7APpdTArMg8D/Vcj1DPM55c7vdWXMLjgiF3cy8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyagSFHoqE4yD6qKtbYEY +fLVturv3CTpaRCvmrmfketSSDC8POEEY7dCsw6Ch4kfmjZq5BMW45rJDxVqJlXa B2ZQcluU6oQYO7YRYKy8h5/B3omjbdp2UErcg2nfAbgHLJbqiLyCQCTIgK/RH50H 0DLFrYD5gr2YIao4lAlvHaWM2+NCJf2DY1QaPB2NHfU9GSJDPp8SiBW0BKbquP5e 0ppzuF5P9zZu2bbyZHN5Dhfa3Zrdm9n9wzC2FN+E6+oh/qo45z94MxkmL+ThFX24 /9/Vbd6SnQNHpDTnf7xDhxD/NCWVZQ0ckfWMJHCUaTDKuYnzOFMHKtPJtw1jxzkU vyhsgPKVIfNHMIdWREz5NikNR/mGGPPIzqgjK7JlWEa7Qyk8zXxATydkO+4k/PW7 IiizgyB5x5T99X1sr/WwJU3wOiUhvsrO4Yaz1sZiUMDxUR7nHf2GmXI1seVQhvLx b/oWajnv862q4i+rXyOza0HuJ7X27FHrdHJgcybkVFRs+59K4cyPax1eiOUjTBF6 /1PoIlsw3HxCjeqV6v3w2TU/LR08RkgTLT6Hn14X+OcpmBuwId7pbrCGnDTlydQv GN8LkpmDhezZ68G5g5yWHZzgmoecg9qx/V14WPBqLJzVwOhQ+ZJExRNAZ3YWu7UX ALBYV5ERvtct/cABU+gsqQMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318591889585264836151896136071088168312887 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 21:11:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 21:11:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benchflex.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822686849578747344393588385142184303666764878075697154106155099017110864145618426013603992639915948383306078958994577885947031842956653626485161150211887770109753778494198984237283496376665148668823399449271989301630260874374645715389785611539220749843628628102718968701878475931892326119136495159994763723929658859395412944011310526032610735086564192792395347088112622310104459539020850632019732491734585888497231577185717361910324727541873552543721087023631553146091797286248284203427964874257006632678237858046484134878189757655918608769695860940976371562627531952006202925920990936976442466570308021173646410044664911492607375327317892909646864250481428723694033669668001586660505670182712455079855314562078549540484697170675915093793785172297137246583452731568702117353507822858215153973716888996715469973395176531748737784809894969238255663347239671115576079916689919826817258340620108003334008811233361625368674835776956026973866777636794126409978915894255863448382144522883722065270924643274858645248175139838071579524765985967551584840679510330590453000906734790918228458926228060167687171413310786532237734257767947978447274961542785961507859055077038644000510548848883828808166790432915543729631149209921565212263620323587 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e2664ca3282dca29bd2844b372638a1bdceb65e3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchflex.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017069ce3b4d0000040300473045022100e5148b35a8bf741cce46d647445c88a29928a649662b6d0449e79e6f719f23d80220566d67950ea9ba5f58f107c6076f256ad636bd2aaa95c1fb104a64d2a0c9b701007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017069ce3b6300000403004730450220104439b82a610f223290cdf0d4f48458a37d95dfd38092953e8ab5b92f8eca4e022100fd45a7c7c245fc624ff721389cb5836443c4e5257f8dd134b98e6ccba91f2df2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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