mediabracket.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:25:0f:fe:8a:37:2b:a1:10:21:35:a8:00:87:04:5f:66 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mediabracket.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:25:0f:fe:8a:37:2b:a1:10:21:35:a8:00:87:04:5f:66
Serial Number (int): 263427816479785890804805543299898642030438
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:d1:a9:e7:dd:4a:26:d5:ce:7d:24:e9:b1:33:a9:fe:78:38:5a:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:db:c5:7d:d8:43:70:68:ee:c3:b7:95:cf:4e:62:46:6d:72:96:cd
Fingerprint (sha256): 58:9d:bc:2e:ab:fc:0d:4e:eb:a0:11:0e:db:bd:46:1e:2a:ed:f8:3e:6b:eb:94:a1:d7:dd:fb:9d:56:f1:27:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mediabracket.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediabracket.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mediabracket.com
www.mediabracket.com

Other certificates including the domain name mediabracket.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mediabracket.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263427816479785890804805543299898642030438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 21:20:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 21:20:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediabracket.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971571105199973735982399457097658924314572047158825734482112038214764483738443971039629766109954805905130076955820878027808789323501034014402064396044569150021990703894341163246810653122587631858832306094042675419172684055661601082862060713512750286029735495112122902545970357914718474164281027377965560532540666506776505043609766323640496732525717508841676525989612979787689231855842405903018509467559118297923544249915163729846839515612232688315328408321073321471651835947140310533477384547249881630370960054316713233423686530156434694492851500810017241962302717772121977852974327172228495681734519460967456985289562496759565821112136676584425945800213783341810310341968212687817019302553084339329963637019259082603202846929643331655353479501259267419593999632788941625756403381941160428123576232063663187902026155644276694944365862703737259266949396483637073194805084724619966882402583425114796603907594344817502570946663411625324180283628480238853292793940332986619029811992589909552071752390607828978126300757118091442857326911935647593521692948354043588860993971146820923811270498982629867133074850178790576171734116866527985855323533732799447864020658864841626396715115040746377296453161539280115854607842164560830262845179977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86d1a9e7dd4a26d5ce7d24e9b133a9fe78385a86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediabracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediabracket.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f2565e8bd00000403004730450220443fb45e45151db656802bdbd92bde03dca16d31d0abfeea8bf1d7f24b41a9ce022100dab678ba9d60ca27c9a1f880e351b7155461207e61a8d45f5ede58902dad7a60007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f2565e8a90000040300463044022040f7f1bf0f6cede02096616b915242ebebad5cf6e48612f6f39965fcd981d6340220341d264f600d13b1cd67c590b22ede83e53f4d3ca00d21e2b5632d1612ac7c45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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