immersa.com

Issued by R3

About this certificate

This digital certificate with serial number 03:47:36:2d:97:83:c4:66:85:a0:b1:4d:e1:3c:0b:c2:7f:96 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=immersa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:47:36:2d:97:83:c4:66:85:a0:b1:4d:e1:3c:0b:c2:7f:96
Serial Number (int): 285568920884881912814319829044100834951062
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:d2:1e:33:24:62:3f:c9:14:c5:b5:81:32:85:b5:f9:10:98:f9:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:5c:e1:47:b2:a1:5e:04:fd:d5:00:14:7c:97:87:ec:23:7d:87:0a
Fingerprint (sha256): 67:97:5b:f0:e8:c2:f7:8e:3c:1d:05:42:c2:c9:29:30:b1:9d:fa:be:01:e5:cf:ba:c8:ae:92:d4:49:cb:0f:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate immersa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for immersa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

immersa.com

Other certificates including the domain name immersa.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for immersa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0yoVk5TWIJ4hmd5nQjC4
JHdb6hJjXP5DuGk1yTy0sBZAcNT1oREBzjHFx8CZNJI5AhmJsmS2Dg5amJsMdiI5
MQdFDmf7x4mxLoZd+ok+Wunt4+b21Hdt0V0xk/YN7NxcJSUF3cUQI3BIvr8/BXvi
FB4G9+R9/R1udFwPDSjLi3T9zeW7YLPReHzaMpy7S4TKJf3bv3r0TDHuaWVehHq+
8Gj1sRguI6QqCd4igJO+q0UDzKycGwYSIy04KcBQQnTRssXxD1HQY7S3sf9M8f4y
mJ8Bf2SQUakSB75Rxgg07vG780RRWbJNFyuaXL0+xMFLBQNaWXt9I6DcHfiasDFi
C7KQXXUXw8jigYygQExujpsD1BGT3XMSMCFGa7cfLY3+g6nGxlf7aeWcuZlCNiWp
xnlb1SeRTaiLsS9eotGc0hm/mfj9MMXsAR5A8dLR9hj3Fve/WiLcWUwC5qV0750t
95iSvhBMr0uTznw/QZDHMZQDoVWCwOJDoPANQMTYMmCZECcBSY5ivAs8h49dO9vZ
aTHDYaixS0mrsgDDiUANQGeiTF2ddzazwMCvx27SaHBaeaQMjVENebw1la74RU36
OyjKtlHoIFEO677fdEbBv+HNV3sxpE1+jQGZEU4d39hv2RTAK34kTBhsXH7RXILM
lYAtw0+QTE7fdWEuI0p5+k8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285568920884881912814319829044100834951062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 16:42:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 16:42:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'immersa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861475558102888117198433183801351537012026213590801480117149052293292668326776284529953241268431061443199803944794054381283100391580927004439555511996649844509313409712118134238661230967322458852894544654246912088501131214442973101872651536905803626832083748360431406397600783603946580144709092711383163483606192276611642048831540120295463440281109516668839564293290648229178308753677362404631413777217828713455216469737162340177155034138349026622496518276416171691690412756751965113921575656112527071084454920271878628321975391733881535613442345995585233836272235446185250188046645288288583400601802304928728073342066611254799919416115207132736046317922319501208273435578394252948960925449328554270299552450632841781735552934618058145582983139048080765748983956361102972020894485940022019786005477921030641482748252225637099610693494382410376100043578399495604230436446464704579111109782771571555338833509591777429053616984750737033293665102023197409008257273159796867428275035338562631023733825302289621665207711006000853683950037977521773411648337884040183286524610953155860322325614339316830005890641401555138045361588510394537113807858064500869229396690933962513069898291311589359214887889586179982121853327804582222088426355279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7d21e3324623fc914c5b5813285b5f91098f98a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e959aa5b200000403004630440220230e474b6128b342b9e8d5b5df86b8229296022f7617df19512b517a84b826c2022012dff98cc6569dfbf6ef4e163d7d16e5fed1072cf6d9907f8b403427b10f7ff9007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e959aa5ca000004030046304402204567508a081e752f476ae80a4ce2357b0da8b2952ae8a0b2e371fd7db5b8107b02200dfbd3db8a1f70e33da92a524f7c26c1d020d43060336f5ab20c37b63fda0f82
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004d7d5d90e8b02a3048801aaf23f92600e146e3f81fe40cd5a28667e18603b1c48eae6198e767507e4e684d74ca0f86ad6c4e46cb047348be0ae3431e108be49144e4cd6f87b16cce0338b9f62d26cab2861738c13b39b1bd06c82ebbe29600fb9aee455d0301ec23d91534e27c424603220942202e30172f421add56aaf2da7cddbd25261f2eb04a68c868c48c61031dbd52c0cc202bac5f6a181934ff536b3a8c614985a47e48f6f6fd45b2ddc0bb8cc40669a6acbf9d789e4ca44545f4d42188b0bd023efb117a05bcdefaa094b58e46a0d391c2bf5737d3bba86b77918b2414ba22490c9c10a875d8d8d32ac0543a7cdad2293df92a732f5c4aa072329929