www.newbernnc.gov

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:95:2b:ca:61:a3:20:36:3f:4c:6f:1d:bf:c5:17:7c:74:54 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.newbernnc.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:2b:ca:61:a3:20:36:3f:4c:6f:1d:bf:c5:17:7c:74:54
Serial Number (int): 399209424026362884205518949501075667579988
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:c7:9f:65:38:7c:95:f1:53:e4:59:05:23:53:04:d6:eb:b4:a1:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cf:b4:5a:0b:4a:de:ec:f6:24:ff:bd:39:44:89:cd:ec:e7:7d:e6:11
Fingerprint (sha256): 4f:55:46:7e:ac:ca:48:f0:72:13:b9:33:b5:b8:ac:12:91:bb:09:43:00:99:a0:f8:2c:a6:6c:95:90:f1:b2:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.newbernnc.gov

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.newbernnc.gov

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newbern-nc.org
newbernnc.gov
www.newbern-nc.org
www.newbernnc.gov

Other certificates including the domain name newbernnc.gov

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.newbernnc.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAhF3ydhaIbpFgOrHrpdKw
+6tsliSoRpOw9ZWKzvJ1cWMp11M0G+q0estGuGyhoU1pTMT4/BiXw3w0fvdI9LBz
cVWFAbZIpmd2KRmfhbRh3vef2ti6P2sLEvb4qtqIVI5zbDQBElR3MfUXYlMrDdCC
1r4DeUMIvIcgflFl6gb/1CfMJY21uAmN1gy6ltQ2MO1r2nBekZEOgdkF/OEVgIiN
abCaBD4jgm0//3RIvmeWmX1qFJOW4uHjhs1hEKv8VIwFzPWxxUA5jtOrV11eHKvp
UB++lndo7+J2BOyk38VhQif1fBcpfqdb7GVuA+ohLMrB3uEXlJRHZ7J2c/wufKlP
aF7JXct/XUwd++doRpNs1hbb3t2WSjn9Ga2W7jfN6wU5MzfuBOSIlcOuRBpaDrJ7
uCXtnV1JBryxTbvJOQW1GHSDJpggA5pYwFeL9YDctR5RQuuQ+7PNh9T4RE4DCST1
xfqEapk8rhx1NFk9X4Ib348Szzb09p/43p8SixqATqjVAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399209424026362884205518949501075667579988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 22:27:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 22:27:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.newbernnc.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3003906273109320173264440361467951765459255182333152974834361160243595712960263637043461475051769301820367886877751134601926835285944713851540185227747668240397245993598700139355719367241441002629843348888580724150131505787392937231594066749699786664554391917013252895661737698291545362518158261108685964630001056298875155012504062454485996393545833067631991124868944287324055718907754956340030181164059537466813215963464175192465341686438756486593875201318659583611513396015730427315939410784787094296300750559138970267410309714871241564076879059220032370199064242724324348414203615290033750822278957194486189517835860480942200185585409352130934512030356961119552381425166696716406079366407222660700621963987604079479032806651314257975519226364930740767131918623819899472965803609569743192192603678638507504148094247658747293370676865601776939243776738647864841563641752858818235220216852357281573197803082086393452470118613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65c79f65387c95f153e45905235304d6ebb4a14d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbern-nc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbernnc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newbern-nc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newbernnc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a2b9573e0000040300473045022100b1ef41ed16fefd973796da21df508c44fcb4db086dc67fa6fd8f816fee95ef1f022045e0f7aaee82ce6dce21b128e2d8dfd3b7212a9222782b0efad68713de3808e40075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a2b95776000004030046304402207270df3c9eac6af75080bfdd16e989511fa498bbf069669c4fcd2afa911b739002206104ca870092717829f68228098c213107972e52260f4f65386eeadca6e43fbd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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