sur.ns02.biz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:21:4f:f5:7f:10:3b:7c:57:c2:a4:91:f2:26:43:84:df was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sur.ns02.biz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:21:4f:f5:7f:10:3b:7c:57:c2:a4:91:f2:26:43:84:df
Serial Number (int): 330118175607880389242605508382549461927135
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:70:20:16:6a:aa:84:31:c4:6b:63:b7:3f:ce:e3:00:c4:86:30:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:a3:a4:40:00:ae:93:0b:d1:9e:3b:4d:a7:6f:89:13:46:d1:8a:e3
Fingerprint (sha256): 7f:5d:fe:8b:85:75:f1:44:c0:37:89:10:b6:41:f9:17:1a:e0:4d:38:ce:25:a7:0c:a0:71:f6:28:46:af:93:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sur.ns02.biz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sur.ns02.biz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sur.ns02.biz

Other certificates including the domain name ns02.biz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sur.ns02.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330118175607880389242605508382549461927135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 22:46:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 22:46:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sur.ns02.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 615797976434686257320666077963106276590062168265314418371664831373450156865873907388383992874205679367236214622838181603872742584356245309796875158072507952086007462422343269731847230869843963172208477813155394419380622250177817330733907303875479151652982536725424611354669860616007563697627621414053874798904651432197562943994405171907903424827678452943618495754309902422624209333975443155948453747641688416849803897150289633277421320804646792267163913143231427923153488576817587751008295570823013796268098906922797554083654511474996642849555742236453823537586653513930068586011815970783963101648186398837402609360843027319226503649373490446249227933935354146727561628975815263416278343814025772325900152749352198626217691322160989991962555239640466731957945466189844281066223711131572337098273319305483757740430740330966140881049863468477500263069217415984420703516968401973542433613146442379361683829554003047825286006594658353350707062203907525667821620962443296909348572842735743118228524774746630427226904024334759700843026891917795312352580781195524762022966608297452230731510824061039151149729729739636895665739836682273176991393023433169041798436191730269809823007474757724981425849234261898186371672988027758360871907917479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							417020166aaa8431c46b63b73fcee300c486309c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sur.ns02.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c213a3e9b000004030046304402200ff55ce01ce76a21d985edd220d6fe439301f7aeecb7167e96eff32f4750d7b902207f3a566a5eac586099a196ddb8a82bb1cd62aa11ca7c1f0312d49f20d456bcf7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c213a3e8c000004030047304502200b97d0a3f55e160e4f163271c47ab33e99411214d86b06c76e1a174174a7a43e022100d33d1df0d65bbc51b115634fb4c1c6c97f52c3542cd2c2e7b02e690ba16ad63b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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