esurf.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:84:22:99:99:94:43:dc:15:a1:8e:2d:4e:ab:3e:3e:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=esurf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:84:22:99:99:94:43:dc:15:a1:8e:2d:4e:ab:3e:3e:d0
Serial Number (int): 321402192122279172630979442899261585243856
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:fa:2f:51:83:a1:ad:bb:01:ef:10:37:fb:b4:87:9b:7b:c5:c7:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:a5:da:fa:6c:00:09:38:63:e3:96:d0:53:50:c9:95:99:48:3d:12
Fingerprint (sha256): 76:3b:b6:7e:26:10:be:45:07:1d:c8:85:7d:7b:fd:79:d1:ad:25:d3:e7:4c:6f:74:a4:fa:eb:a1:b0:73:9e:33

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate esurf.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for esurf.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

esurf.org

Other certificates including the domain name esurf.org

(limited to 100 certificates)
826.me
esurf.org
www.esurf.org
village.asia
xn--qma.com
esurf.org
www.sanjosejointpain.com
www.portugalmarihuana.com
esurf.org
answersingenesis.bible
esurf.org
www.chemicalcare.com
www.esurf.org
esurf.org
tickdisease.org
www.yspco.com
www.howcanibuyahome.com
www.esurf.org
iowastemcellclinic.com
kituba.bible

Certificate

The complete raw certificate details for esurf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321402192122279172630979442899261585243856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 19:36:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 19:36:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esurf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814563076535650401511225153290893361891786177436231197098207763267152428587002142611528516924652242661689280585922427785533535291886172398327687963217257593643004960222929560983810392043232789673880960741939716181896339679320338635689129393152223989675295752924057531669109722352144568465441842187649975867871426756999036692499369393124730265040805932675963372237905587794160791508146308514134850969541451714308049193583082633965086523335999877181552286412890515595052506625032440017813471497553136049717431027230624816325070879585505997691724385686850442954619029842326988765195492263305612694993980331922814503506947290297478687656254829424072344378409847441556125799098310286367132345999672763983169095314777544641115578424703361859925226020992129908706213762776803210570416821878077414755963088083285914462201176342596213957347459188059312233149909384928309916504277245326570949346063802247474426611436369591249283071103077020240252905938194384298065557205907401915813975296355324265872396869609752667300917882988728719124550167164475557597989792922068579286398291795308895517611681947610371703680372111969996611355910930455631044779639060095763281625905807110211351246224107789950330266215888833792893032825580815593280586251443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52fa2f5183a1adbb01ef1037fbb4879b7bc5c706
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esurf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001704fb797660000040300473045022041a40f2a0cf005fe183fed6aedf1b67ddb98c2956786c6468af07cd031eaf145022100a02f555a57253adfc964a718e37a296d1c0098386739445660602bf3988f05c700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704fb797b20000040300483046022100e30c2ecc6650e31eabb5e6fbd05ce9347c1df870575b0f92f108a92842c021f4022100e5b1b836e04f9bbcb5e8dbceb6d624d73e2cedc36b0ca8c274c0f5a87af8553f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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