clsmechanicalservices.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c6:8b:54:dc:4e:71:26:fd:07:76:83:3d:69:76:b2:d5:ec was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clsmechanicalservices.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:8b:54:dc:4e:71:26:fd:07:76:83:3d:69:76:b2:d5:ec
Serial Number (int): 328897969758321704357141752582902767605228
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:27:c2:c5:31:7a:59:fb:af:bd:d2:c1:2a:34:5d:b4:e6:2e:45:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:8b:1f:33:42:88:3e:97:e9:be:8d:03:1b:c9:bf:29:3a:0e:9e:18
Fingerprint (sha256): 50:9c:46:d6:62:f0:0f:9b:a2:be:d1:d6:f7:98:5a:7b:a3:b5:f9:7e:61:a2:22:11:a3:76:7b:c1:9c:d8:3b:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clsmechanicalservices.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clsmechanicalservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clsmechanicalservices.clsfacilityservices.com
clsmechanicalservices.com
www.clsmechanicalservices.clsfacilityservices.com
www.clsmechanicalservices.com

Other certificates including the domain name clsmechanicalservices.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for clsmechanicalservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgISA8aLVNxOcSb9B3aDPWl2stXsMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTQxNjE0MDVaFw0y
MDA2MTIxNjE0MDVaMCQxIjAgBgNVBAMTGWNsc21lY2hhbmljYWxzZXJ2aWNlcy5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClROjj40LTfmuYCTEH
jODCKZzZTkMLlmF4Sy2X3UH3MaEBmdjotSGM8t4oF8N7sTcALCIrbRCHYhpqk3pV
OU1CNzKowzfAiIpZEPQft5oPpUDcQQacTvsCcBnGrHH3HXyBF4qDssC24UIiw+me
UX/Y3jiLuHEvbLqB5UgdVkCpsPE9kY8yjkBhpdANjVu32Q79G2p9UQAzTFZR08kJ
KjAgLGOH8I0AETBbAL8fOI13LCosDo8r29Ro0mpIdZRYVXWpItys7g1yWOHVvMCe
T+vQOfLhr91lnoEslSWnfMF8JhBUFMoUYSmbiIeHDO9PZ2F0uqwgf9CzM6FAaCbS
NmfpAgMBAAGjggLyMIIC7jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCYnwsUxeln7
r73SwSo0XbTmLkU2MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wgacGA1UdEQSBnzCBnIItY2xzbWVjaGFuaWNhbHNlcnZp
Y2VzLmNsc2ZhY2lsaXR5c2VydmljZXMuY29tghljbHNtZWNoYW5pY2Fsc2Vydmlj
ZXMuY29tgjF3d3cuY2xzbWVjaGFuaWNhbHNlcnZpY2VzLmNsc2ZhY2lsaXR5c2Vy
dmljZXMuY29tgh13d3cuY2xzbWVjaGFuaWNhbHNlcnZpY2VzLmNvbTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2
AOcS8rA3fhpi+47JDGGE8ep7N8tWHREmW/Pg80vyQVRuAAABcNoJ4goAAAQDAEcw
RQIhAKkxkYYlLPM99PJ11H4hXkjNp9xnyqafVhBP8jW/hI4ZAiBsACyxpymKYdOm
dwB6qHjs7BogGdY4oTzQE6d4xwkw4AB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq
7rxhOhpp06IcAAABcNoJ4jUAAAQDAEcwRQIhAKIntaPgZHmakfg7l+aKkJ2n19A7
toS16aSSeE1ZDzg3AiBmbt5vKgxcADmauvbao6AjATv3K9HPTvAtfRwB/QXGFDAN
BgkqhkiG9w0BAQsFAAOCAQEAHm4aTvq/9+NK5y8P/tLjz62CQ5+JD59voQCqGVrU
aKg17uoqyxtfnD2uq0z975aYvmvwxvGiLtSa6OJeYcp3dBF7wexpUruGZIrlbQDA
wZ90yuUPxPLAPyQnM4FOhOmgnp+et8exvN5YpDuTWmKZ7AeLSTABRHeBYXBhy9EJ
PKMeTXIleOcYt+TQX0peA//hvdQABkSSWNNLYeKYgFok1Ql+u09hdGeErHUfgY9B
EnjlVxI7tRIAvX4peewtlYribTZH8j6G9xMwjJDvTJ4XmPUHH+D2p0Oe80syywE3
fu0+1leIP1TUdvY/o27eZVI9xlzktG0KkMpgkGgdWIroCQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUTo4+NC035rmAkxB4zg
wimc2U5DC5ZheEstl91B9zGhAZnY6LUhjPLeKBfDe7E3ACwiK20Qh2IaapN6VTlN
QjcyqMM3wIiKWRD0H7eaD6VA3EEGnE77AnAZxqxx9x18gReKg7LAtuFCIsPpnlF/
2N44i7hxL2y6geVIHVZAqbDxPZGPMo5AYaXQDY1bt9kO/RtqfVEAM0xWUdPJCSow
ICxjh/CNABEwWwC/HziNdywqLA6PK9vUaNJqSHWUWFV1qSLcrO4Ncljh1bzAnk/r
0Dny4a/dZZ6BLJUlp3zBfCYQVBTKFGEpm4iHhwzvT2dhdLqsIH/QszOhQGgm0jZn
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328897969758321704357141752582902767605228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 16:14:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 16:14:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clsmechanicalservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20863300972403111915319863366236934139947320188926107146663794741410206719652723650208774280886227065520269606425397991476580061134625993956756810382405534787729390939726051529325532533735296586194704058843897664522811926950467882378012449878100749506636579413932681966876265314120526216576628987291460952082236429067277538671231986981561185960382532044656301282722400704608490928143435270783389930092367195060437984702377749479803891078030485781564769279831040930756169420965616691053113856338785963492635207284008493327719737021306170661179514156691357007570802297292205128892299982248610522343996100295720598661097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2627c2c5317a59fbafbdd2c12a345db4e62e4536
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clsmechanicalservices.clsfacilityservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clsmechanicalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clsmechanicalservices.clsfacilityservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clsmechanicalservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170da09e20a0000040300473045022100a9319186252cf33df4f275d47e215e48cda7dc67caa69f56104ff235bf848e1902206c002cb1a7298a61d3a677007aa878ecec1a2019d638a13cd013a778c70930e000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170da09e2350000040300473045022100a227b5a3e064799a91f83b97e68a909da7d7d03bb684b5e9a492784d590f38370220666ede6f2a0c5c00399abaf6daa3a023013bf72bd1cf4ef02d7d1c01fd05c614
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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