www.brynlee.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:47:5e:c9:fc:b2:eb:19:cd:59:a4:13:45:be:e1:59:52:99 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.brynlee.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:5e:c9:fc:b2:eb:19:cd:59:a4:13:45:be:e1:59:52:99
Serial Number (int): 285622902055282311656129805592890216895129
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 82:1a:fb:9f:b4:02:be:aa:1c:bb:63:0c:16:0b:9b:80:db:61:15:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:75:d3:f8:f8:2f:28:06:3b:18:48:a3:2a:3e:7e:5c:52:ba:eb:60
Fingerprint (sha256): 7f:ca:09:87:a9:ef:75:65:fe:f1:67:bb:ef:41:74:b1:ce:2d:7a:ac:91:1d:25:cd:0e:64:d5:b7:e8:3e:b4:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.brynlee.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.brynlee.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.brynlee.org

Other certificates including the domain name brynlee.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.brynlee.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285622902055282311656129805592890216895129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 15:01:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-15 15:01:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brynlee.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769733301139696765317380982699241389823173752808013979895307757141351140636994019435563062790779568968907037027924690074880397711922946692466777504153013350481254224845874946682356544736198760630764949106736168681400215496018775695305029346839221518851050285784866056953722579971531983182886391313705955380088269950939120015245880460664827879947781476122169088467374165570263021347859068073385192434400085142762540017518866782261508583690282280097560377695750320735631599853127975626094617503608336846914866652571781646017929407326970897023871713513290832388517564529968244296085378740954908716437623818752253286456175313018307984474875031779888281408068720795477160573348751787099101078879263205525657054811160899466633961723200480462551854362117281588766841310244000836023653871720822466467163033447097228989524395325585296464573696207871843000208891915799150233835900288083125416573945038018361995752679908872984652551760065984471995082297165285323915933378907670752976569902988928294003554624153629052219614813410073689314756121019594426725335480119743606697865324794097663938208184977955518470363535026288409242830922990533589760106712972959078873781632093106809597002126228086185618896155138290618600790589809271897146351275201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							821afb9fb402beaa1cbb630c160b9b80db611553
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brynlee.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b662bbeb60000040300483046022100e51b9fba159e3ae600a1e1e582749bc185c38f89a084dc77ef7e8b6f6841f60f022100dcf3991ce126030cc5e32556d3f45c98af5f121771b36473e7bc0b2c7b3d6ced007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b662bc09e00000403004630440220160a66ab13c5ec3020f60fd02e8a6919c635ae31013e29b65757789a55a734ef02205ad09519b11949cee60696fb1fde7327d460db4fa366af0fd5c792e6c64ed53f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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