www.samgross.com

Issued by R3

About this certificate

This digital certificate with serial number 04:71:6a:d6:6d:02:d7:56:f9:a8:3e:da:7c:ad:85:de:84:9f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.samgross.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:71:6a:d6:6d:02:d7:56:f9:a8:3e:da:7c:ad:85:de:84:9f
Serial Number (int): 387043062719195708040262754966231811261599
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c6:d9:4c:09:de:6f:88:8e:73:f2:9d:17:0c:b2:79:de:9d:25:1b:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c9:15:a3:7d:ac:9d:36:e8:f2:09:19:50:2a:41:0f:22:9b:49:bb:6f
Fingerprint (sha256): 57:c9:68:c7:5d:ea:4f:e5:32:80:36:92:b1:24:3f:8e:de:83:87:52:af:9a:39:99:0f:af:88:32:eb:df:8f:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.samgross.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.samgross.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.samgross.com

Other certificates including the domain name samgross.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.samgross.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387043062719195708040262754966231811261599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 19:30:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 19:30:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.samgross.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802894016972358512019122800359021946512146160391258911834547334838389684868887855974780493933772314003752245965018227097173113993475072709485863055035464726614795783342261305545030605298536982861147613687826590117019915275327899718796035684896254584837907414847569615960004080407663212170564802708251297083466910773752220037880418925256014101920104925196588879933532044048853665123800627882514429059125062420538412019630601257718932439697375307814033621948963127771451230980487762683153367376270373220586415458425266303507680306059770894075829138782584275705384828560845840274458967666632569274871761716068337483211879697586403362805728434879800678091228884642859303569568496940420947277390509605292472894216184845487955147250322299217348700171096491215636123105284034147161430736012473519803763378443700060380706645167779962126866760998784871425775536219510111429004833433243699689463886570745149622068240279313351323494526442441324828563403983125262908545751027309582481539661817689583516526816706235385677115898180811817581930598152455652667866068928807799088264967868603870469858559569076619736067068883625058421574353156994979995277503821825396018453214139511551949896810619829905672954275589872590354153554338421387576175901691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6d94c09de6f888e73f29d170cb279de9d251b81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samgross.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf3936959000004030047304502202ee25eb8ce21d38797ed3ac238de768e29f6f10924d9d2bf6a4a80afe3ed6905022100f2f88c1972ea76f429701a34cd53f1e698dae3d7975bab52b52d4641e4719e9d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf393695d0000040300473045022054df654acfd814a8fbfb415328237a17485b6ccb2ded55323bdc25813130749b022100b354f00c9a1257a8bb609f0e20027a8e0c1645b71c66737ddd0343067c15a58a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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