www.sierrawestgroup.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6b:7b:41:e6:f3:03:bf:23:8e:3b:9c:3b:cd:e3:de:93:8b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sierrawestgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:6b:7b:41:e6:f3:03:bf:23:8e:3b:9c:3b:cd:e3:de:93:8b
Serial Number (int): 297910908282806316805233806158755006419851
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:e8:ab:42:bd:4e:14:38:0a:4f:29:67:ad:5d:78:a7:78:29:8c:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 12:ca:9d:1a:f9:d5:d3:d3:3a:e2:4b:e8:04:b1:2f:e4:bd:e0:62:fb
Fingerprint (sha256): 76:9e:cf:1f:da:bf:67:5a:38:d8:91:40:be:94:66:94:0e:7d:12:98:d3:c9:62:93:15:e1:38:7c:94:3d:69:2c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sierrawestgroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sierrawestgroup.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sierrawestgroup.com
www.sierrawestgroup.com

Other certificates including the domain name sierrawestgroup.com

(limited to 100 certificates)
www.sierrawestgroup.com
www.sierrawestgroup.com
remote.sierrawestgroup.com
web13.tigertech.biz
*.varmintmastersllc.com
www.sierrawestgroup.com
web13.tigertech.biz
*.thepilatesbodyshop.com
remote.sierrawestgroup.com
www.sierrawestgroup.com
*.sidetool.com
web13.tigertech.biz
*.premierleague365.com
web13.tigertech.biz
*.theholisticshebang.com
*.drjoepersinger.com
*.drjoepersinger.com
*.michellejungstudios.com
web13.tigertech.biz
*.spiritusaeterna.com
*.orkork.com
*.michellejungstudios.com
*.sierrawestgroup.com
web13.tigertech.biz
*.orkork.com
*.codeblueband.com
www.sierrawestgroup.com
*.modenaearthworks.com
*.desertpathmarketing.com
www.sierrawestgroup.com
web13.tigertech.biz

Certificate

The complete raw certificate details for www.sierrawestgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqi79riQDBjkp0Gu+UH2U
KJHNafOVCJjZ4lMbuihb+FA0Q3kUGawmnf7rubCb/qjeFwcEREyQnMG3OxIhqPyN
q4GA+dxRVSJ/wLX1o43njyjp3bdwmrGPajD2qOezd0IHniL0w4cMRKPopRSvXb0n
sDDZsSX5DEFqLxgu+OGDqW3Uyyl1nTwrYEyMoZH7gsU/1Ztw2MyNCszbHcSOpYQo
9u1Ex/btDSfQygBurkA0xsTLp/e5k12zT0ZWfxWV8VXVKK83CsCpKdvXLgOne39D
52ZJlXKbvT693nnRt1pK/SAuJdWIv8wf1ikVJtwV6Fw4/j/gT1LlrFd70o4liaGx
el7WReg4fxOjfJifQZj5pJiGeIcVWYDgirbv20/FNabe6apM+UgbKNXK76nTyx/S
KUfiLqjtBliAwxs6Vl6Sa2rRE0PUsD38DEjPxCISPWVG5M0PxM+RgsXA7J9fGp++
Kk72ug7Bxn55VkZCaZ0fY8Bq/w1q5aLLPkmWKCerkpe+RF/94zA++fl4/DAqNc87
TaO87VGv4vQq0Nw6FOL5MKqXj+nn8UAfZdkoxtNqaj3RdWEaYEaIsD7G3JkR/G4h
Q+EkEbvsHhTGSlewogjM3H6VS+vcX3tunpZao1Tqau2Q2U+Wm512yRPt26UmL0Vp
ZIbHwBwDNT1k4hqJWR4XTb8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297910908282806316805233806158755006419851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 14:42:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 14:42:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sierrawestgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694288344310294181942988831325142975115581591546963787158639907911276546812326925257515297216805184914977157088437164991869892910326660922023831488560407232791048849876960044633969542445318597442785040773764222625841131844488498446230568748929532381725396468320463613229239146565060786937413877889522753507323977915088997235229671148381209667370736280055148176348085143588687066412959760114293518101985726968125660537832597580339844917394977383465533310187808854406907982694230790101897754428680481428039102478114827675577045328950868319444177805564270120050138207035305367032219778079240132687838132600042048644180555575894633426396929980231448796911018231919529070629067528353642313858889699453545060964144361131296190169060405864897834218008156308363046103482933529507696703788949971863471170994898622967809417590247016533413005507111809278601325784778524950853585312403174071409576665129743036163601680662484913097148434503993671795356411830180918430530220160028752452149699297958496710719767378157462090707306592615916756301764849122544663954208589329616962746787836854689877366915252471607004653831172884720991741284636418292838873066447735438582069793871172384098534980603481869058697181370917170157055971411467322126885146047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fe8ab42bd4e14380a4f2967ad5d78a778298cac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierrawestgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sierrawestgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018eecb987800000040300473045022006a0815a05a017dead8ce2086c1b2948c1f6ed8e455a3a6e473301b7ef9fbc49022100e3e6a1c473b518b58aa5b81b7c36863613884abc8a77095610a959f1ec1e90d9007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018eecb9882d000004030047304502210080f4c44cbf282e94c1d61f15b82a5712cca922d1fc15d0ce1d9fc83394e698cb022078da454546d6b77cbd261a32bb93c88f549ec9deaaa0d15fd46463b7c079c5ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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