www.laureltreerecords.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:f1:4f:74:cb:ce:54:47:9e:a9:45:13:f3:57:2d:e0:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.laureltreerecords.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:f1:4f:74:cb:ce:54:47:9e:a9:45:13:f3:57:2d:e0:28
Serial Number (int): 339922558694439262327196607074513380565032
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:6a:03:a2:dc:cd:e9:a6:5e:64:86:ad:dd:c9:3b:40:34:8b:17:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:28:d0:b9:34:57:29:47:4e:49:b8:55:3a:fe:c8:cc:14:fa:5d:87
Fingerprint (sha256): 60:a4:aa:03:fa:dc:cc:9a:d8:0a:8e:c0:2b:a9:21:8e:0c:85:10:f6:1d:b4:3d:f9:76:f5:e3:f3:71:c9:6e:20

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.laureltreerecords.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.laureltreerecords.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.laureltreerecords.com

Other certificates including the domain name laureltreerecords.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.laureltreerecords.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339922558694439262327196607074513380565032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 07:45:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 07:45:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.laureltreerecords.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730144977161990288840354553633701821649283584527706405845300026079739412122167424534761655011962137087623025898074576459645907583935184320687531584567767536516449012769008946040253217012580997209664943316013214952913809345772140006254659987829192507822869620381263632504281971488453978520339818312621853352910691428585007076922007848721031034967852050648831674873704519896760111455830885654935608637004473444595940192208975120156256789657139602133525857942832823968727839882341419702091366006556096682171344188887131338639230460244688681007519812496303344881891349012487921950582141791390012886987562949410218330038076388203098188165309219570660516131893708120996401427502186975939238447991361623273130409881713089904052641575717257167594740497331003412720536283705430572539616662889518718214193804800581970041789055063315787503241051871399940548276126955665644567856882439473265034487752164679583416697099986853739871921259648420927366085747995513606504149667626802628909198089375432383855638762576998514813401659741144137105666489327440237948406946832721727072640911444510007846685728949354583004599494235129294449826318177943064045294278008298478307153108884640530734344215034608659018081943198630409599845823780927598941046885873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c6a03a2dccde9a65e6486adddc93b40348b1793
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laureltreerecords.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dafb1e774000004030047304502206f4cb3e161989589d030f352e6f7171c4c9688a01b7f59412aa7d93c782262630221009be45aae7439fa83e5d1791bfbf1fd49f1896638c72f9d18580db65d20cbef0e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dafb1e7700000040300473045022100bf691d2688751fc9934d85a63cfff7fe4a4c4e33f7b1ad9372c8446d79ed02050220223125aa46bec29e3be166b12c0d21f84ec479eb563f73aac83d6d6271553bb3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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