ranchosandiego.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:45:51:e8:4b:d3:71:cd:f9:3f:3c:55:ff:1f:96:40:61 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ranchosandiego.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:45:51:e8:4b:d3:71:cd:f9:3f:3c:55:ff:1f:96:40:61
Serial Number (int): 311450507751939973739386248269413863538785
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:e5:1a:18:92:89:b7:52:a3:61:a3:c4:19:6c:b1:42:54:31:ee:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:dc:f3:cf:68:43:31:61:ad:ac:7a:2e:52:8f:c8:70:7d:9c:3e:dd
Fingerprint (sha256): 55:47:f9:5f:3b:6d:b1:43:54:33:61:8f:ea:b8:92:5a:33:1d:75:b6:ef:9e:24:3e:f6:c1:8c:57:a9:be:89:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ranchosandiego.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ranchosandiego.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ranchosandiego.org

Other certificates including the domain name ranchosandiego.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ranchosandiego.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311450507751939973739386248269413863538785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 14:16:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 14:16:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ranchosandiego.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 897094214072777539258723771028278914747424015718010355803212317612858552252998635374757250195529802227081432914246114656154410835649630472866094536311321712354824071571344450395898333174546291003929232512367146033002743584864296985722373356774520813668186731074558193351095690297859809842505150929176403940163577817304254803764037594229494858149759829498890606062355099254832171341187738056355897520165910278533428418151806043526326078454725151880366595911506956418403016399640353653545518066034887529441870086794889173945045561824906901573738615147700132064583239115263451114090410800759125009757382753585538343620991556884836864908237746784984531627133752564108507395896992320516297212838856307830371391091278749289995900801835269969233784785967510329092240128941170594668571349174534651922444775263924170762902143822543118072642440686464762648376739954862975756904634622125250687903767358126111988449464870026125700606779032601321122152773621652373464685878797375278799859952926606903980083919430950267135891890310841661578319409895537642840830582662512409135990313256200725470179260316510226149846727221085684412209997704611936045314306034374417711183704331477807124124160200697402311620183582053701174503715343577472506466443603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ede51a189289b752a361a3c4196cb1425431ee19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchosandiego.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f199520df000004030047304502200b96efb1e3681e51e10c28d9c79bfda7d7373b28997748d814dbf6923279c06a022100f5faea88cd23bd3fc3072aef48f769989a9529d6a3bb075a9479e60f28871439007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f199520c80000040300473045022100c91ea427ed27acffefb1d68f29d34c0ce1956da375a5b90fedc113e404f64aaf022002d470b8d80efca92ad8c72081ae8f2108764be94a8bebe7ad5e49611f3111f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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