www.ranchosandiego.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:12:25:e6:1b:b7:20:d2:76:dd:cd:53:f6:05:06:42:e6:93 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ranchosandiego.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:12:25:e6:1b:b7:20:d2:76:dd:cd:53:f6:05:06:42:e6:93
Serial Number (int): 354624602557873354821260992018419007284883
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 15:be:d4:91:e8:9b:cc:5e:a8:10:2c:d2:9b:37:8e:cd:f2:7e:77:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:06:a4:3c:bd:3e:1d:e9:0b:58:cf:11:67:c9:87:fb:01:54:60:2f
Fingerprint (sha256): 50:76:cf:f6:cf:9b:9c:0f:5f:26:2a:77:5e:db:04:5c:72:d3:7d:b0:39:f1:b7:9c:b5:c1:0f:50:f0:5b:fe:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ranchosandiego.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ranchosandiego.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ranchosandiego.org

Other certificates including the domain name ranchosandiego.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ranchosandiego.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354624602557873354821260992018419007284883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 20:53:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 20:53:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ranchosandiego.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784488246406920455813444262138180728923767306318480754619901248333285350779482462341191838144935282834908305974537039328248724878716298554179201231117932246156009317743254651172986185850675618904191571970051805427608603841882293347079973879512142847023481134065992332794706819049892270887048042891306499358112986357605435316300005380150941657758184822792949586265271469055171082470945943145811978173050773532627136000004937078793712474376102505546439762496179240669177685979615636584032579486213808404944275732516750280169743514799678497068622619478302923432426704537146802524692387177502655463869476390107986409028732167343856606493519520643087704759473435102921831352765890958498943960534150338485332650329291631634399311458214245097903872901782158884771306669327940451682991841294536625911107088613238808857928769989635034713642473634359989617838645156362665166544581655566257484643545306734699342269019010455788189684205213373788641681491332564756841606817569981893114355504678902453260414421516653376728245135411267096213052363783805794294391881448672826328183407081971107012015251486436793993500018504129960249116161300474145361821303997702128425598431114890486912601176721409707287403612214147944352680092330194854755735583957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15bed491e89bcc5ea8102cd29b378ecdf27e779b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchosandiego.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170408afb7900000403004730450221008465f4717d94d919840e463cc6a2825082cff6585ec1cc6ef7dedcc67e9934f602201c8bbd87c37291ea911e81a44bdcf8aaae52ccb91544aebb3c8c239e79b3bcd6007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170408afb83000004030047304502206eb7b2517f036221c78dc70650912b58a15ffc57bb46d92d991f26bd9051f990022100afd728a14c08dc3dcbdc74c0909f8b5bc787c51c52febf53af5f44923d5ef910
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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