www.brushbag.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:c9:9a:07:e6:b1:41:bf:41:90:d6:bc:61:7e:2f:82:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.brushbag.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:c9:9a:07:e6:b1:41:bf:41:90:d6:bc:61:7e:2f:82:00
Serial Number (int): 315369446369912202554933962368781671956992
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:11:00:a1:f4:48:85:32:81:b3:54:c6:f3:6c:a9:46:78:69:0a:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:2f:ee:7a:67:5f:30:87:cc:f7:be:c7:30:be:15:8b:d3:e2:46:2f
Fingerprint (sha256): 6d:4c:c8:95:76:24:33:6a:7b:af:0d:f8:1e:76:d6:5d:07:88:fa:08:cb:70:af:73:08:95:8b:f6:7b:49:29:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.brushbag.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.brushbag.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.brushbag.com

Other certificates including the domain name brushbag.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.brushbag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA57JmgfmsUG/QZDWvGF+L4IAMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIxMDQwMjVaFw0y
MDAxMTAxMDQwMjVaMBsxGTAXBgNVBAMTEHd3dy5icnVzaGJhZy5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDBuAA331KkHNDSKTJAyLQEE177MktI
fP4Ith4W+lALLghXVILPE7xjziXHowW+KACqd4H8aOvqBCVhtIVCDzFJcegM2L3Y
EqwOe/Zj72CR3udKeG9hB8S6nVSILp4lClu3jKkckkDJaTLSn50UImulqu/O260s
e7ztLE4wHK9Y4Wt4/2bVxGvh1fpfFIUa7M8kGscreNzyFpq+Y9afT4LkzdQRM68C
P5KOSzLKfb7e3+HdohXRmxt8n//+sgm6TZKxfI8S/C7g+WhG/5qIYksLap4U13aR
EnOumzTk/neVGw2C3ll4WigsMM5ui9tB6FGFppGY11SlJPhSVo+v49N9gYBDlkwQ
kSy1ofqYiYTONqYD0q9qNbKy7d/UMQLfnmQ36M7gkyUWju7uSPSfyPn4qzhMO8Us
C0adJ/+SKZ+Oof6+J+isFfhRh+Mh9aLU25fpaiDUQuxfgp5pOHewGNDY9oaK/tsT
pQI56juOL/LTEYhbEirHCnRMp7gjTLxmu/RClm8f7abMbE4QFyz0lv7cnpX9SSVA
OqoLayAHo3u7G+BsiAKjiRa416HdA2y3gcqZBtRBDDLSz3/Wg3WRAE8mmRPoyD3d
BXlyIBqJ5opLpbjMmdxHvuznBTrkpi1I64B+Fzp/DxJMkr+bVq0C+KelD6bW612X
cCWJIMk8yhC78QIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRf
EQCh9EiFMoGzVMbzbKlGeGkKFDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5icnVzaGJhZy5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW2/
xQ86AAAEAwBHMEUCIFMUqsbw0xCQY772N44wgca2YI7k03Brl/f2cVBpU3GWAiEA
nWnFUm2mbQaAvr2W9M4oGQTQiNgSlln0ctqbCQUzCMQAdwApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAW2/xQ80AAAEAwBIMEYCIQC2/WILQGA5ewMw
H5q1khLq8th9Zms+XwZRK26fMDDOiwIhANPm30ivt3ZkX9Muwdlx2DV+oZtjmgSA
2K9liUQKEajqMA0GCSqGSIb3DQEBCwUAA4IBAQCFynUysX+J0srqEnqhkNYTAsqK
xrB3K1Uf+rDJEXNveYu5NqkMF/yP6Qx2YAdudnG9dP8okByiBW4D48s2YTn/0xW/
Tk6Dwcm8Lmon7cSlVeCiUGBI6Tlhlbot+bF+p4+YofrKFoWBLCM6/WHG5lO08vzP
vKdeKlDt8OnsWpL5Y6dImOWWYou+X8eTNZKiShGBYE8WT/Q3TAaqBuqK3jDsvj2N
iiBVUad/gVqh+/yqCpAEcv+5VQNalbcnASC5s55mP7/M26cfHEKsNd9jpqFT099y
I1tR3bpYdhUA5lHiM55JdOVBKbrN+kO5hOb1Bt/m/py2MxcfY2obJk/ANhMg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315369446369912202554933962368781671956992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 10:40:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 10:40:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brushbag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790303562888016209917685852732552754675656650648475757371300660626053386556472944417396177698756263417094603305737282967319801221812334069856035948847706867118853289409313901547450239479407878017319809394650000356897360097678583678612312013323227920214547944640788604531034460260972522991233575321983914360098982365302596504870638426825533001040519302351311526297179163600556284728054372370444603193868949792493866163414488581011505866312381277276836272961167359869553775180010186237995349567513516597697893862344517278132189601805916550697563919802606691010216369117673590825835937891456267288224179432210005672961488020259108605357588731934528027836752150060947943969663578219791977670880744404456377819321747961601418536422928339014814168479417782975924739006562989837480322261497416910135673993343471927193608330112409422073116475130312514792405579530473289887472653226744585555664028169599523774720362850583920773063173479182350171211658502208407835891676005045408528252781374603305654393198285583924651266198296422929118247371025223644803515206410965457017144135467383024272612074653069766351427764173581426425959869345995028456953407279054404655705440594159737886146910718530263148245196150431210509226983489927201698624879601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f1100a1f448853281b354c6f36ca94678690a14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brushbag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbfc50f3a000004030047304502205314aac6f0d3109063bef6378e3081c6b6608ee4d3706b97f7f67150695371960221009d69c5526da66d0680bebd96f4ce281904d088d8129659f472da9b09053308c4007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbfc50f340000040300483046022100b6fd620b4060397b03301f9ab59212eaf2d87d666b3e5f06512b6e9f3030ce8b022100d3e6df48afb776645fd32ec1d971d8357ea19b639a0480d8af6589440a11a8ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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