denvercoworkingspace.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:5b:b4:93:27:75:69:6d:5a:54:d2:56:e4:6b:93:95:fc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=denvercoworkingspace.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:5b:b4:93:27:75:69:6d:5a:54:d2:56:e4:6b:93:95:fc
Serial Number (int): 347209911605048643620665765550335183787516
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:37:2b:49:54:53:aa:c2:93:66:c7:a8:8d:12:16:a0:c5:fa:b8:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:02:98:f3:a0:59:54:c3:4d:aa:6d:6f:e6:a4:9c:04:6a:f4:c8:4b
Fingerprint (sha256): 67:f5:3e:66:0f:70:a5:4d:95:ee:e1:92:5b:dc:1e:49:c6:78:3a:ef:bd:42:08:31:52:66:2e:46:b2:d9:7b:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate denvercoworkingspace.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for denvercoworkingspace.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

denvercoworkingspace.com

Other certificates including the domain name denvercoworkingspace.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for denvercoworkingspace.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347209911605048643620665765550335183787516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-23 15:52:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-22 15:52:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'denvercoworkingspace.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721144320771660073349125076661765024958967225921404096374277932648189275517259922127950554006320496357594935059965302408634599527930632754890636953548172069394846474216880978467156249935959965308401579202441849408113057249397005590806854591489627915895090685023636406518123230134934689830951774535204466731258665837952752242916761713914605347437538027864538678594832415258539688045407400870890230369461261682207068556129971043264536117316384576118445436539662180922686033115148471506375906392042904734283031314330750357285465572092496058243546256237743599711789183510540660420193223296033224491227475639223767804322179712368862176519565358800040186815361598399115787871101163557610540186035111874109317822869397250295966516474650089028658705354996349909060897579877212604985439284778178343661993493007023090651963994537269874005096563335131928567984171759352409016477244485570883824329223751648223417387211665153687742323459566010341416302818271837123878295012784706860835599481699378394438812556056724882159969797358372567217467285985862216064284388913152726634255544138359527825955036539320892859321749569952518892371938370431290371700772475349468427453012534421798449650993437153524152686908223555091177703796884139724772063859587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef372b495453aac29366c7a88d1216a0c5fab804
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denvercoworkingspace.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000166075887890000040300463044022060354664b5c99cdc33f977c9bce7df9106a5a3e61f258ed5c8fb446c5582d2fb0220734509fbb8b223f0b3d8eedb286657bf7e75770522b58f17b35d5181b9aa23f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001660758879b000004030046304402200a234c3890bcc1500b2581729377cfd37d891bc882e367259dfed9367a93a6cb0220578f7445d63f64613b556dd902871619a2abe6605f0f242a9879909247a30c7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009ac377346fea862614820dfdca3da63dd91ab3d1c0ae67b5ae7e09abbcd48067ee546b0eb4f5b61d31e4e6fcedbd4d8e1be7539d89825f129029cfce974b118f83d9c7fa1813f0d4c7f4522d545f355481e95046104f40ca49883257c8db4e42ba41db9d300e2cb9dd976a40064ac2a783c2dc8a05452c24aca05301c9b5af237605b1fb2a9882401aac8676a7469960908da6381df97a076fc082e777bedcd90874f8d89de3f0edca343371cc4412f51c3939d9078bf8af76a8410cd4f80714f3969f71f3b63ea7dab6390036d69ba1fc16f519ecb7784e8a435d66d067f0075d72c372538ab837cc8226886ba2dc45308bd512506a9f91ffa58818f36fcfaf