benefitsofwine.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:77:c6:83:8f:bb:25:9e:7f:d9:12:b6:a9:cd:95:37:19:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=benefitsofwine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:77:c6:83:8f:bb:25:9e:7f:d9:12:b6:a9:cd:95:37:19:e0
Serial Number (int): 389206615639898427415635493461146570529248
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:e9:73:5f:6e:1e:9f:54:e8:5b:52:9e:53:c8:09:41:8e:b3:eb:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b1:22:fb:7c:fe:c0:38:97:a7:e5:8e:eb:38:86:51:da:e8:57:85:f9
Fingerprint (sha256): 63:26:c1:15:8d:3e:d1:28:46:ed:ea:cf:6b:44:ee:7d:4d:b3:11:1a:0b:ce:39:a0:67:be:c6:f7:f5:06:ad:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate benefitsofwine.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benefitsofwine.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benefitsofwine.com

Other certificates including the domain name benefitsofwine.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for benefitsofwine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389206615639898427415635493461146570529248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-17 02:00:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-17 02:00:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benefitsofwine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829795151227142035746570324959463506472842689788769483638203971755443512670397065344807872077687926988752883503010096276723412893230514608754982034695725365273120029579804355068553468790045599585175021877741653779287082571397492396569498185955672398351945853882750180187648617716012338285531723388566989000848250188108611880576231286577971695726421507865616691240200758496414313882139002637211987901372566866262374237181066701631081702629938060234834905656277699579274503468940205293420309885506007316826726070450644150345719102082164099261867868236070650844851501848564134246746248977688982034657016430454265929198377660200197923402993829393438295193443187955325138417762231481354321689192703391199994448841973680032012367107831982849650586852636204871229591659994324523944750055360967446890535039939590027705574843462131244104438630272693437792329923550932372955775052729587531873847620469602335572519902876150250617235378522798330380854178064269391294807995172496951525183568576428067136355126641691950897388435258187721029375138870064219657541700121821658065737290307307110592399571899461794126699427322454416399185734778474140871354245170704155513334563231139715250188445087667958779350744096307344345368726741185989243848312731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ee9735f6e1e9f54e85b529e53c809418eb3eb2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsofwine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167ba1bbfc70000040300473045022100a329d5de9f2201a8a80327a2640165db2fd3477362f3c28193e22461950a8d28022023ca920133adc492f9bc864760e7f1e520ddb1e9d322cd4327557c7d04ca1f2600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167ba1bbdc80000040300473045022015998cefb89e3ea8230663a91e6aa48ba1e686bf75eeea2b15535b117ee7b785022100bbeb8e6ff6b0030f709409103cf63c5f98a45498385dcb515300693896301349
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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