readymichigan.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:30:fb:fc:b7:26:a4:fb:3f:87:ed:22:58:2b:60:ce:08 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=readymichigan.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:30:fb:fc:b7:26:a4:fb:3f:87:ed:22:58:2b:60:ce:08
Serial Number (int): 312104041802487672940573534033976932486664
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:01:58:a5:88:2f:f4:0b:53:82:dd:bb:e4:21:0c:85:63:c5:cc:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cf:14:30:55:e4:5b:77:74:e5:1b:09:92:e7:ce:02:ca:a5:2e:74:6b
Fingerprint (sha256): 55:6b:24:89:ef:27:d3:37:6e:ba:60:b8:5f:80:1c:18:6b:e4:ed:4d:63:ab:45:cc:6f:19:e3:bb:59:5b:c5:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate readymichigan.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for readymichigan.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

readymichigan.org
www.readymichigan.org

Other certificates including the domain name readymichigan.org

(limited to 100 certificates)
readymichigan.org
readymichigan.org
readymichigan.org
readymichigan.org
readymichigan.org
mail.readymichigan.org
readymichigan.org
readymichigan.org
readymichigan.org
readymichigan.org
readymichigan.org
readymichigan.org
www.readymichigan.org

Certificate

The complete raw certificate details for readymichigan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312104041802487672940573534033976932486664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 00:08:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-12 00:08:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'readymichigan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852923306810456997818140865497350515477376841468344766589997328367969039724666226226257103128227210393670814396286856125792962394089660101416650033343937016406709685642268119998308275481414370964937503693451631451683565351118724424996874102490761708349717297226152307072914982235738162071063842863460132399519322863366066430722232923284444695235313389671936227456995236350861110637500687297956069922047999248512245578016121268084336765705800029942987230182220760285398416509695253766922148692217859799311692240976058072606011287399164965328675516352706713024360469763405441142134104083400538765004869683306602439866070061577907800071157252900315359386328716594169317700337449778673231153538774784312003458052018643861140123963275529356822854962861305920949842091294970207368357926775452438723240581074983969864624254714093131948882987713310463284452778579074670877653907886281367139478738067926128968662601594950826168933191307037543255421501965645231259076161671105564382736323335935181116134012394562368207517170628153502087446793571831545893633810370822419795653851173741621896220384974500973712112301133741258907724480466771165434614795627096001074450453403960947126065741596561056341945648746874640174722680839112288514040738971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac0158a5882ff40b5382ddbbe4210c8563c5ccb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readymichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readymichigan.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168da198e970000040300483046022100fda704239db82914875d518946852233f71bbd719a0b5bb8c2d19b87edf92814022100d7286097af79e16b062b6f8886a5f429136c368d7dfdc34f79ee0d9f58a781a1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168da1990e000000403004730450220794177ec274c6dde5ad8f5ee69975f2e4dcf4614999bf0f5305a2cf42b266e11022100ee2e6896ba351ed7e59a263af6e9862410a42560988ac8174a08857d9c19ac7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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