www.comiso.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:01:65:cf:7b:5d:b4:46:6d:40:e2:a2:84:87:6f:04:15:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.comiso.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:01:65:cf:7b:5d:b4:46:6d:40:e2:a2:84:87:6f:04:15:97
Serial Number (int): 348924755429146311067933492635939822114199
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c9:02:9a:ff:0a:e7:21:17:10:e0:a6:85:d4:84:f5:17:a5:93:d1:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:9e:38:55:59:48:45:31:5b:ec:f7:6d:15:30:97:18:3d:3f:86:13
Fingerprint (sha256): 69:70:02:3f:a6:18:79:eb:a4:1c:b4:1a:e7:9a:ce:64:3f:85:f7:60:60:5b:3c:94:71:a8:51:1c:06:2e:4f:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.comiso.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.comiso.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.comiso.org

Other certificates including the domain name comiso.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.comiso.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348924755429146311067933492635939822114199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 06:51:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 06:51:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.comiso.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815977515584867804762236058180241955040680580485598312033703512048345046488632188971222436671968213462725355568381501263740535691844744138719859284614735018150948129234738889267665325577561473705596211527315945543446722633573393560110784443951533107522562274834770005319346472978845601239804227178250479012450072448465774390995568868848206579914853245964054339337373785428909277707789391802434498146242206380557093555156679805186130740501677596721301260125430277500161803265574259183578209196062229205967294555397158752480188201774232409926010665484708485837358878247706368396697180282532794126777972205988188589726229222047371738805097576982642022456800731949916773327483400620539812690624062263126972381431509824029981626894443404295075024404105241003810979079633049828539367656244423519168795763909395266644644645715302849122093397710047769707761922471556593353142298863277027545725233249045198132308525572266174799197309023902215712173643044047799515783014553480785460850908069164153960055691002704289184890315330731397659467626275179978040171208912379437591868716109999419824160690973757032629724280048305560265977668723467526110328366928556418880290608113262392366009403787651415945293483747381746360452575001029948796538301679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9029aff0ae7211710e0a685d484f517a593d1f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comiso.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ecfe422a80000040300473045022100dc0e76e19ad99c8fcc144c322f79e485ed30ab681c053cfe8b5771c9bbca756302204bddf418f87aecc8a9321828ca9961e46cc213590e6fa2e5a9c0094a76cb7000007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ecfe422960000040300473045022100ee5281836ad34e960b83ef49588169cc30bad7c069d64df49dc649aa972cc5a20220539bf02110c4ca028e1dbc6f41aac328e7d37d75aa45f3a15aa0a57d99e44d97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066137c1f837e8475d2c9312fc451457faca4d91f39e46ff7148f74320deb0c60bf7aa2c6c0b931efd43b39d100a0fc55bd13b6863a5b24a6e0628274f1b1d0ef776eb936433cf3382d39702b2f311131c4f9b477ae1c558c98e52ae329cfc08a884e159ef1ade6f26adfd850b454f084840e6443f33cee0d9c2a1a9f9d11aaa00eb46c4fb0d20e0636b5d4d61af460b2614a82a080b04a63a56c3472b9b12f584622de4a239ccce1439c55490c44ae24d4265735ec937fefa530445fec44558fed21268bd78041e0563423f0614d85b3c68d4c4d8ae8cfc796fe85acdfcee428813e7ebb0f22c545610b2c91b72e227c65c7850a2528eb20f37e906a595a2c59