www.geniecom.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:52:86:e8:da:b6:20:0e:16:eb:33:9d:31:5d:f4:97:2f:a0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.geniecom.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:52:86:e8:da:b6:20:0e:16:eb:33:9d:31:5d:f4:97:2f:a0Serial Number (int): 289419337483098792478014131711363165663136
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 46:32:06:78:30:97:08:16:e2:ce:e5:39:31:38:9f:d8:54:63:39:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ac:ec:dd:79:10:5e:46:4b:06:c5:7c:b7:22:ca:bf:a7:3e:59:33:e6
Fingerprint (sha256): 5b:06:76:6f:8a:27:d4:45:da:e6:76:f4:86:c7:16:ee:c7:dc:01:00:92:bd:3c:25:8c:66:4c:e8:06:0e:22:e4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.geniecom.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.geniecom.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.geniecom.com
Other certificates including the domain name geniecom.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.geniecom.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgISA1KG6Nq2IA4W6zOdMV30ly+gMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwMDUyMTdaFw0y MDAxMTEwMDUyMTdaMBsxGTAXBgNVBAMTEHd3dy5nZW5pZWNvbS5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDLKb7sr5/aIy9juNUm2POJkV7eXn0X dlaig3ctzOFoQQVbQoPqUO/vAdVYmsqczLlScACmymGPQTtAdjdb/RgWBUGIWxsh 5MsKFt+XIC9/pT0EenpMErNh3O1IJgsvLTwaIon+9EXEKKki6Ud2Vsd+TMCgM2lT B33I4IqaacbA4q2K6oSYV6F6W0u3VVLBnwpY46k7+CUuNWOH4kRcJqp4KaNvp1Nt h3JhHKHoh3csV9KaEtqqeFt4OZotd+k+qJaFe6A7kKJiOc0X1cKSMcju2dvWpScg U9XGI9TVuETSGNHRcFrqDBZThXEuv9RHc4QdZt2j8bYEko2fpfKPpyE4AltY6hZe sDvIcRsJbeUKAulXC5txpwcsrKud2048YOZnlh2z1IqwrwsCYV3wU9RbduDnbF/Y L5ujwn6LcN4INdUPo9/Mzad01c4iE/68AIuSlRZLkPHFEfEUbdaZ7nWzIejhDsJt LJ1SvkXMFs2IGJTaAAWKXMYCtTYF1v2uLRCzUC+pdbfEy+0RF8HfX4XELERPmLwB 3s8TZ/Q78fArKXkwJ7Ql2rma/NxcjHfc9IcCupYnU4+SiItqvSH9bhDJslFDPLem YyYTWVP8VbgTXntK9P0C8xxjfGZf9cxAM8b7smA26q8e0B4mawggJ+rLIGGQ+x13 kZR48vNfjU2NWQIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRG MgZ4MJcIFuLO5TkxOJ/YVGM5QTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5nZW5pZWNvbS5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC BIH2BIHzAPEAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW3C 0PeXAAAEAwBHMEUCIA/ICtCldl2JtQxOi8LqBH0U9Awc/daF8bLhvFpZL956AiEA qKWLxGTY45kRAyQ+O/NvLI9YO9RIkOkFg6tj+/uuoaIAdwBep3P531bA57U2SH3Q SeAyepGaDIShEhKEGHWWgXFFWAAAAW3C0PmAAAAEAwBIMEYCIQCync0ccI/N9gxz 6nn+uxoGjEiTtHc1SvAMKTpLNJLj9wIhAJTwzldcX71ObUN7FioKiC77dJvvXcyk 5Gc705/2VUGSMA0GCSqGSIb3DQEBCwUAA4IBAQBnoyNw0BS4Hul01ushp+J6ISkl aaydULqTV/yludyWM8FJ0X9W/NdcOGX7pxnB/YwI+iPJHmHT4FXnQG+dSjZYmCcz eEMTAuQV1RNYH00oY8OriBbiIFxO0uy3151rtqvtTl6xDqSJgv35xCzfK/im9TQi ph6zX6RAj6vU8jRs5pebW1kbUoYgcGjSGlOMPLfTRAI4whdr/30cgfEORkGRnwQL 9DHnMypodS5pcDmJHNn7BWwHRb342SdTMl1hQP75SI+9pbXBxqDjBoI6I8+RozwP zn24/VDhaJXrvo76ooOwEELR45es3r8QtXGbXxRuTI5KCiUnCEyHDPyccPvm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyym+7K+f2iMvY7jVJtjz iZFe3l59F3ZWooN3LczhaEEFW0KD6lDv7wHVWJrKnMy5UnAApsphj0E7QHY3W/0Y FgVBiFsbIeTLChbflyAvf6U9BHp6TBKzYdztSCYLLy08GiKJ/vRFxCipIulHdlbH fkzAoDNpUwd9yOCKmmnGwOKtiuqEmFeheltLt1VSwZ8KWOOpO/glLjVjh+JEXCaq eCmjb6dTbYdyYRyh6Id3LFfSmhLaqnhbeDmaLXfpPqiWhXugO5CiYjnNF9XCkjHI 7tnb1qUnIFPVxiPU1bhE0hjR0XBa6gwWU4VxLr/UR3OEHWbdo/G2BJKNn6Xyj6ch OAJbWOoWXrA7yHEbCW3lCgLpVwubcacHLKyrndtOPGDmZ5Yds9SKsK8LAmFd8FPU W3bg52xf2C+bo8J+i3DeCDXVD6PfzM2ndNXOIhP+vACLkpUWS5DxxRHxFG3Wme51 syHo4Q7CbSydUr5FzBbNiBiU2gAFilzGArU2Bdb9ri0Qs1AvqXW3xMvtERfB31+F xCxET5i8Ad7PE2f0O/HwKyl5MCe0Jdq5mvzcXIx33PSHArqWJ1OPkoiLar0h/W4Q ybJRQzy3pmMmE1lT/FW4E157SvT9AvMcY3xmX/XMQDPG+7JgNuqvHtAeJmsIICfq yyBhkPsdd5GUePLzX41NjVkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289419337483098792478014131711363165663136 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 00:52:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 00:52:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.geniecom.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828833011438661853847148638731684164348444794875887698589987262845910553121103081104650372261776336977997606044417383995888318699930071298931914708749875217785884869532986628509398255356167354310111498631891887622900226609936504910726298142170402700111582660165936235407191577131695749927533122696041732350609026532720135852307403690445230157649811674937144099646238919704637596915479500714358004651312717146393389528065735809204344639709598580776473519804687006673313538126993056941688886245118042506987704931981267709081310268404377033531847889620892154573332092005352181714386914123954973414856301390048424972811882954418354271641146696473213485438635798700839564305965987544968290627702538598835187173846477738905507950722127787228685900811514519559040827123907201890906788634303714887791878628173379712896130839229632750476335068502787096060206620591294461595340675265207420975478794198683357047730813863426387806956930756110104305309979258800906760568580574469899530166441331771306576254434526533198877827536173442675004395617486827479832757023950870367876047558555149637372619903839591029623645210790521988072251619714135131574405532589294421884827257218721153360137881414230912741803027019414607454077323418012877040942681433 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4632067830970816e2cee53931389fd854633941 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geniecom.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc2d0f797000004030047304502200fc80ad0a5765d89b50c4e8bc2ea047d14f40c1cfdd685f1b2e1bc5a592fde7a022100a8a58bc464d8e3991103243e3bf36f2c8f583bd44890e90583ab63fbfbaea1a20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc2d0f9800000040300483046022100b29dcd1c708fcdf60c73ea79febb1a068c4893b477354af00c293a4b3492e3f702210094f0ce575c5fbd4e6d437b162a0a882efb749bef5dcca4e4673bd39ff6554192 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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