millsapvalley.com

Issued by R3

About this certificate

This digital certificate with serial number 03:87:c9:59:a0:d3:10:fb:14:71:77:9b:35:51:e1:de:ab:c0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=millsapvalley.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:87:c9:59:a0:d3:10:fb:14:71:77:9b:35:51:e1:de:ab:c0
Serial Number (int): 307542617533088544369395213079656557095872
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:b6:5a:96:a4:51:48:bb:74:8c:7c:08:db:73:8d:60:a2:0f:d7:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:39:12:ae:3f:ea:17:62:ac:c2:36:55:7f:f6:6b:0a:1e:16:a8:77
Fingerprint (sha256): 7d:a1:44:02:2b:53:0a:22:82:2c:0f:fc:55:32:e8:0d:a6:ee:72:28:42:8b:b3:b6:69:89:d9:0a:a2:29:04:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate millsapvalley.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for millsapvalley.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

millsapvalley.com
www.millsapvalley.com

Other certificates including the domain name millsapvalley.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for millsapvalley.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307542617533088544369395213079656557095872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 03:03:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 03:03:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'millsapvalley.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831763323588084708574418259418890964142760896492556131421704392270531707620383801308797260982292287150845281685087182893898311830726095352310513843856548153136244734908739752140574382781343562749434845380258739706863176552463129968736966708046137725457827623225889500341791058400951656456977085161744752840804970183607061340487381337588247098013567479330323652544755978027777028996251689478129099343894523776959988398692467468894405241711914088808754481167413461711476167057861666164401979652554713552816227528354078225262195654950636230360630181159334387838685760076139057981229563656194208954207100303771404952538519662621081540758459275789149350016313177010571628902413129399415855969767024402757328558390780181717358837358661741613782466297508259126153999244091453779115668300005595084217075137870346730614600847386460167775048465879120275281838885904278473800424473793154953735517198226460946548806742192716300987830136878359058424600184648935098233608639555718936608241076339128078019697536824865529799705893749478416092123853898458761653007495453230304548973424850164969243786744517967685859953444172623875856017784949071162085050793458930895838231566226603781934257810144171119267715487496480674191667346563906954826342656953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9eb65a96a45148bb748c7c08db738d60a20fd710
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millsapvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millsapvalley.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ea746978f0000040300473045022044fdbcff4cbf3f300b47f8a01c056cd6d137b51674a20f7cdb90c96d34c76ae9022100babfc4b67a9e8796d4a0121f9d846a30ce213b61c2ea56f55aba67f81fec84130077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ea74697530000040300483046022100973e8a13d20b70deedaebb3db8a3d4b0b63b05f7ed356c9a19b4d03cae8ddfae022100fc50f20f18f06e7c914c7ec697fb696226bffb99f7176786030b8433278e62b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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