dev.leafexpressionsystems.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d3:21:e5:a5:3b:0e:18:c7:c3:a8:2b:0c:75:60:f7:0c:1d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.leafexpressionsystems.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d3:21:e5:a5:3b:0e:18:c7:c3:a8:2b:0c:75:60:f7:0c:1d
Serial Number (int): 420293780058476918015184947724613687118877
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a4:7e:cc:f7:4a:df:00:3e:34:8a:af:cd:86:f2:1f:17:06:7f:d5:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:9c:67:fa:7a:fe:ce:1b:ca:24:f4:5b:94:ab:40:53:b2:89:d2:0a
Fingerprint (sha256): 7a:eb:6c:87:8c:a8:f6:50:27:c4:59:52:e7:db:80:bb:66:4c:b2:6c:45:6f:60:d2:36:2e:0d:99:31:d5:ae:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dev.leafexpressionsystems.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.leafexpressionsystems.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.leafexpressionsystems.com

Other certificates including the domain name leafexpressionsystems.com

(limited to 100 certificates)
leaf-live.kissdigital.co.uk
leafexpressionsystems.net
leafexpressionsystems.com
leafexpressionsystems.com
www.leaf-live.kissdigital.co.uk
leafexpressionsystems.com
leaf-live.kissdigital.co.uk
dev.leafexpressionsystems.com
dev.leafexpressionsystems.com
sni.cloudflaressl.com
leafexpressionsystems.com
dev.leafexpressionsystems.com
leafexpressionsystems.com
www.leafexpressionsystems.com
dev.leafexpressionsystems.com
dev.leafexpressionsystems.com
leaf-live.kissdigital.co.uk
leafexpressionsystems.co.uk
leafexpressionsystems.com
leafexpressionsystems.com
dev.leafexpressionsystems.com
leaf-live.kissdigital.co.uk
leafexpressionsystems.com

Certificate

The complete raw certificate details for dev.leafexpressionsystems.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420293780058476918015184947724613687118877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 08:31:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 08:31:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.leafexpressionsystems.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804014262825536822844683129476812651936656808948234198473992520728603281983686652787664030551596328788879518688679280398175938546489262189325528209612181620384059000799690896671315752777017062943721017194031593436537081063363174683961874264698719258485498660597252324009805699353772340913050943391450686896669711451943887632234502010270527097187085806459863423934960212177859312029091077760534311275763812380667187869399011526537410818917359905547247858009067947131169128114808938456812278937013925792948907941530820721862309373476811804910741305733800560983102824381114124279558424545626467011639558508711910829220520031347250674395433215342674759280149993603569047213221418068289369018254986133089862549717388914681406923164578632279626877562235291846028260448868450017134017552523549301301459122236356963373793309299168103750540389928069697636372367405452651795992434089816752701242227855214784266536736301259158271800313881986851515148406442120855882215854850024642614749649873228914881672941292402203993088139476878827440586662042206040107267982215879151926064390857232140342052804096385480124250867055967446883044854188620567445506266091306830566753693783386079630668587395283988914983122044826711176268632303580602134875729291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a47eccf74adf003e348aafcd86f21f17067fd55e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.leafexpressionsystems.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b2c20afda000004030047304502210081739bcac3f8f15ba415d24d5989a12b3007ebc864ecf8103fc57f9724cba71d02204dacd590cd628aeed6328883a661dcae40d10165f0922e1f7225e0b11f9b0307007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b2c20b1cb0000040300483046022100f91fdbf0961bc3dfbd2b52978bf17d39ada8eb9eb64cc4fe795dbff535985a18022100986f664c7463937716d15090f9a12f3063f44d5b02b39f97db22334fbb050a1d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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