www.cornerstoneauburn.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:8a:06:53:90:e1:51:a6:04:bb:05:51:23:d8:18:65:73 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cornerstoneauburn.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:8a:06:53:90:e1:51:a6:04:bb:05:51:23:d8:18:65:73
Serial Number (int): 273770489316552579563323681558287028348275
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:d1:35:0f:ce:2a:3c:07:3c:2a:26:bc:57:9b:96:ae:03:91:5d:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:e9:1f:61:77:e8:67:8a:61:da:72:52:67:7b:11:5a:93:b0:75:e8
Fingerprint (sha256): 57:90:6c:a4:78:fb:50:c5:7a:20:c8:89:b7:2f:77:92:46:f0:6e:a8:c6:28:af:e2:7d:f8:81:13:90:b0:32:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cornerstoneauburn.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cornerstoneauburn.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cornerstoneauburn.org

Other certificates including the domain name cornerstoneauburn.org

(limited to 100 certificates)
www.cornerstoneauburn.org
www.cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
www.cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
www.cornerstoneauburn.org
cornerstoneauburn.org
www.cornerstoneauburn.org
www.cornerstoneauburn.org
www.cornerstoneauburn.org
www.cornerstoneauburn.org
www.cornerstoneauburn.org

Certificate

The complete raw certificate details for www.cornerstoneauburn.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEy4kZXSzaZKntRCpAlp
gjp347TquKLX1R5XOn5/W+gXgb6oJq3zI31gcLhU6ke6rPDJHjE+g7SKxXmv87DT
xz+oF0RPnAHGzF4uV+D0y8vplitodntqJ1ABWVqjBPW0ftack5SSpHdGtOMylQC7
bzNmKMUpf6/9PRRHFQgthH+rZunn0tV5wbqHOKlIHIm0Jnu41GWej0/zNP8eAzPG
pRrKRwmvBFaOyfoN+rFz2xzcR11sz+lGeNRibfztXZMdyoG+3U3ZIGJXxEd16Dsn
QgEoKVkjeQz5bHxOUsr3AEu6iwiE2de3PGOnXet6IJF7G3lXsOtd3O2YeHc5QSKt
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273770489316552579563323681558287028348275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 21:58:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 21:58:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cornerstoneauburn.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18216148436174068592722124349268206388552908874538599715202551526246306216126481407511768315490535342107435038222005888325400067942256914298416198445781928735157551407095826659830871448383861913328436194958815549057493909350672585453721508422587144303528424330480468720627630497104576295823916887020773997234250212765311939884468309597561796657188108807891844977764389697742013257213492273165893422082002113086035516638143792708519543875822114119548805585539943752199655686950328678663098533891722989917323564211491589160211648492672312547355158293607782682427690741374010263103011675330110941019126027983620426345747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1d1350fce2a3c073c2a26bc579b96ae03915d6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornerstoneauburn.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170c1851a540000040300473045022100e2248db9bed228e88689e1d7a1296fc038185a1a04e9c7bed178898211177bc902207b72956890af194f951920157b3a1b18ac1dca40d4c0a0cc85d8869db609a018007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170c1851a270000040300483046022100f47c85c8e97f7210adfc74e3f480cc0858b561901e84183499879bfe6d2d2eb0022100ef5d807d6958478e4b6c2c92a62054ec4d0dec80511300f0c65def6e8aa90ddc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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