mensola.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:cc:92:b1:24:59:da:26:9d:25:84:d4:b9:0a:62:55:f3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mensola.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:cc:92:b1:24:59:da:26:9d:25:84:d4:b9:0a:62:55:f3
Serial Number (int): 288491088961382869067295160167963037947379
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:a2:e9:95:4d:4a:e2:ad:5b:77:3b:13:8e:d4:34:9c:c0:00:a5:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:90:62:88:df:db:36:f3:47:6c:e5:12:40:9e:a9:8b:c7:df:00:eb
Fingerprint (sha256): 5e:b2:38:9b:1d:44:6a:c9:d3:3c:b4:ec:0f:72:66:47:8f:d2:9b:e1:97:2f:e0:f6:f7:da:88:41:b4:11:0d:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mensola.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mensola.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mensola.com

Other certificates including the domain name mensola.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mensola.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288491088961382869067295160167963037947379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 11:45:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 11:45:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mensola.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895570166137385206422353457060291351062656669085332890816017216433666217602777922405807954410434160865705282674871573026460335811250561029038498788074000292183779569774500636725090284554298164371160267649032445689681951062071193270999776142933082597421436541921637028516296226927194879436685907257823295108292767309558605230004778088469698156205423363487705053821892056303140487006180017456261637845546515338735048187264607749929853727474764185260156591599434885916648245047496623702684574989388151817921729828941854925694392053662824343936168889265075500955835824644802286745454210462583154274825879768408890935311489012709291997161646125255719844878653641014206948903922479516908702695332378938949991549118615722374181766214342981855218227341137442312544253806327361483286531470577109389558385531186032318156042518012447432330027375419355656188816538418054042038300585796700765872598515993881904295179977855056598983211888725385948640615379941113023845997787917685585561136055872678978121610448872814418623355296066348638222285369098072402873025098558257504943582160776565251986051227789744581666592766830975259684988457154115164711336468766850807014206395365282746952769067760931408807305343037042919185327898427610275819722210521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12a2e9954d4ae2ad5b773b138ed4349cc000a529
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mensola.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eeab1a134000004030047304502210082c1e2ed9ec4c481c4457d72d09bbea25f75565a02cab8c7a6ff32f8e57709d3022037f69c89361a5415966b5d8e630b517762629cff77595efeb8ed80f2645dbe7e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eeab1a17100000403004730450220506bb2d58caf96396ff196fd69d313f6fe13fa742fcee78fd1d45ad26f16f3dc022100ceebcadc482b1a293449b712f8d45c91eea2568a9dde6abdf019d1ede7ce0bea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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