www.swanson.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ad:17:bb:85:69:37:2a:34:ac:b4:f9:c5:4c:a0:56:2f:96 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.swanson.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ad:17:bb:85:69:37:2a:34:ac:b4:f9:c5:4c:a0:56:2f:96
Serial Number (int): 407349539113675446892346185247566817800086
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 07:16:f7:23:76:e2:44:b1:14:fc:85:4f:46:ea:73:08:21:1e:12:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:3d:19:87:1f:13:94:d4:50:93:c6:a9:3f:fc:5e:53:f4:82:62:3b
Fingerprint (sha256): 78:03:74:1d:e1:56:10:d4:1a:e1:0e:7b:39:21:4c:30:c9:d5:06:88:88:50:2a:fc:ab:9e:fa:d1:5c:4e:89:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.swanson.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.swanson.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.swanson.com

Other certificates including the domain name swanson.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.swanson.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407349539113675446892346185247566817800086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 10:05:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 10:05:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.swanson.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765575978845506670342284488424046189686406889661243901963288318301357545707897773740415137350427069354836613994461790702720346365721771877074374991810176126547004442714576459995161242707100744498009086897461757191610486659708535565961480068094035559476042376880015468775533234552708867275354842925277452681107880945733377807489859665889482349017863989771770775914460542086710273211324468873202830220906983838241571946040674209744531515363563733729076443976682798062200620349571763432236869350105993325839456181624068254512712534453207703327794140381566061404821146591375986365985623795916557025066604031664735659806896955942033323438769670107599296249698833245435651576024928403683409286151667312683838590594157663584486467724527369720408985844873657065075977603051310507728384110877514072391956836082335140854877944525436722197476165264370328500776715522157345685681757134604397280925238971923428375991278439837479274298263701018716346367062056783346661143788555306266273674665194056326590317696880674264267458162820119179775118055047951697991914008550314196716290836198794758864915483474546065849645541669898603611981158451372119421682874371468004000953543225725522292655269899933643734412669107313646373151507927815426407476416147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0716f72376e244b114fc854f46ea7308211e1271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swanson.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001703e39fb5d000004030047304502201677471e3e5b37be19982d2794393afe311a14d9cefeafc7eea142af2ed46bed022100f202d2be6eeae78f13715e380ba286fcd6cdfb2ac9879017415ea4b2b8565859007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001703e39fb890000040300483046022100d195ac3edeec5ef11565ebbc39ca00895c909ad156e9c9c5717a179a7a5e4260022100a403797fd9f8bddf2004369a4b8e7162240d7cd25bdef60ae83774ad991733df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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