briefbuilder.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:7e:20:17:ec:c7:8b:18:cc:3a:ae:22:88:30:f2:0f:9b was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=briefbuilder.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:7e:20:17:ec:c7:8b:18:cc:3a:ae:22:88:30:f2:0f:9b
Serial Number (int): 314588556401170535666730467192403066490779
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:a9:d6:88:8d:73:21:b7:ee:71:f7:2f:0b:f1:b4:3d:ea:2c:03:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:5c:5b:ad:35:a8:8b:bd:14:fa:b9:0c:4b:8e:d5:78:de:bf:80:3f
Fingerprint (sha256): 59:18:da:97:fc:7b:21:65:17:23:d5:dd:00:6b:12:e6:f1:0b:69:87:c7:f3:39:c9:48:5d:cd:64:4a:7a:61:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate briefbuilder.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for briefbuilder.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

briefbuilder.be
briefbuilder.co.uk
briefbuilder.com
briefbuilder.de
briefbuilder.dk
briefbuilder.eu
briefbuilder.net
briefbuilder.nl
briefbuilder.se
www.briefbuilder.be
www.briefbuilder.co.uk
www.briefbuilder.com
www.briefbuilder.de
www.briefbuilder.dk
www.briefbuilder.eu
www.briefbuilder.net
www.briefbuilder.nl
www.briefbuilder.se

Other certificates including the domain name briefbuilder.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for briefbuilder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwLoosb1xSyFgpPWh471F
XCOp/6OJZyfRhxGinBgXMSPKaMKLQyLYMwhIPZCmnLGSx0hWvJHWvRBeytUseKEy
Zzek2MgdmHBitsLYhDTJZwO75oFN9jXwqzGiyodPDVvwKQAqXrFm450i3N70F1ce
IymRRrb+fz3mJJ4AqW6k98Dq9fRBKONKVXA+XneIEPuZkq1oiQAxtWR8OfXtFCpY
Iv7iyS3s3AiMAWjKZbVpNJRPLI9d6y5nPdKkeN3CHNDPit9A2R8idTRnEClJU1G/
MIrPU8s00NGaSnX1vzyYIWJPZZHAXEyJOu6Gw9qxCe1/8XjPHpzQNkPt2jdxQbcV
N/UBAFUCD/F+Kn6JxlDGLjcQdDcdKRkmqkeFq0mXr38b1710ED8q+NxWB7R+AN/i
iDjF3MAz0e7Pz8EtJocPN3b1w42m5htTNWr9x41uA0JaW/ByOQaEi+QwUJU2vacd
nJF2xMdLRyIAjICGTiOEjQ2f8WPWEChasOTJVbrvqFXx3uOt3X9qDx7IxYdDpHhN
Buan7kXutbwlplGy3wIVGJGzkKp2BrGf2tK5B3CzUuIL5NrU/eebVAPfundK4fhk
Aj10KMkSmz3U9ed6wlkb2S2hLAsehbiSDct9jz/QoNGJ+AUqbE+Mc8pfJY3iUjVl
5kCfFhAH3IUbFDfWGGkwlUkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314588556401170535666730467192403066490779
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 01:07:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 01:07:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'briefbuilder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786258310690446863134296196841854667838381807660956649574727741539606235006906111857671792548009033063770395162106208096570441682370039565157569128451778880541656148439307706442860581376222444088283757945973788494595625755162178498875426420445795118828247958688126758247327273837350081180445259817947686847158921062702887959442923165863816913383971853863656368133690791901260270461582253177961405485767482403850806828758516037195258922288224057015371140545687317628973893867669103398195787458269839497584498747015827609923152006283253656839974310966704311062237934258844959192537058692788037718702769734906254339998916094804505302408981438426717561806594505301872313791075031654152016458478052768661391940553921638935037851019872979712008046823766639992295183691856569408395357850458741781555969341678267196876100146650701796648727820800952194157104540653443992880930800905355291609384124038832663357083427245615184193753050996929328714920560652751026409743403704751888170912365369490884349762221438613963427744143747905704271644593576406198917837691233035317530078141591711453817608174191155129785766469651727055887392044089570741723457072643692166985510573232059906763919888888460857111898731422401758336472267398334670681286939977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1a9d6888d7321b7ee71f72f0bf1b43dea2c03ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (356 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ef2b5f8630000040300473045022016331cb9bc545c8d9f2b41bc1e390bf7d908224fc8ce32c1991f5c416349db24022100848487f76d9adf745297c518d8f58bcdb4b4e5ab2237488c82febe20ec99652900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef2b5f88d000004030046304402200a0696d4ba347f59a222b1645ab9b8c711a09f2ba8654d61946a9864cdd7b07d02201f10623cd751f963bf35d4031c81add7aa9d0edbc4c5af1e1f21240ee34b98fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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