www.citrs.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:f7:c2:93:7e:91:73:72:0c:d2:f0:24:6b:3c:db:9c:86 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.citrs.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:f7:c2:93:7e:91:73:72:0c:d2:f0:24:6b:3c:db:9c:86
Serial Number (int): 336528308129978606984053836641926213508230
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:90:a2:52:51:ee:64:11:34:d5:4f:21:07:17:b0:ff:35:ff:73:f6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 89:bd:55:df:54:88:1a:70:99:94:03:3c:7e:dc:08:8e:29:71:cd:b5
Fingerprint (sha256): 88:55:a9:3a:39:30:91:0e:92:8e:3d:31:19:e6:5e:71:70:dc:3c:56:bc:ce:45:9a:bc:b3:fc:5b:60:be:62:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.citrs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.citrs.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.citrs.com

Other certificates including the domain name citrs.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.citrs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336528308129978606984053836641926213508230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 01:49:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 01:49:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.citrs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893974478689042568039194624233559010969088043144457513759169427079925267044286497398657992178577920120038999195080332576690483718032870477367826566769139620273433915506569313663109011594854102743221327874561008409527981654990034758401478404021313005620459721749421171154928696237482732049478950430476351942486809220684776377193869907764567706553123862991447146724931646440913670092466294116584159443616547718261645388388504999109444373383382720278286899522045943989112513559583856908274593812173675011895087561237558913121897638635554042910084285244388367881696648685702123674388835954581932793467557371763190096520836441294683377331736273380029712047278236383463177502474210100788441861331503775825727490259865360007861295067028370184701890909771309252125889909037202449043141832506953327431351108921213632233382436124644499346232849258420289590150003588958463379698405407695092907673670150845341140588379594717534524934576502451992274850716489026966522135561339778546571239804018505050082797535311838072483065610431921192899678182107882849437016600022478180368964896583296522931246952623039511556540306169631592856004215740420882218849846543559751153586169239929976436389937339171280803690614737295478656389976004544237199516461363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e90a25251ee641134d54f210717b0ff35ff73f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citrs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc305453c0000040300473045022100bebf81276b52dc861ff8a7478ec980171e01030678be69f0d8152abaac0b709902205cbc3c5d9f4acaab5eb24e1d766871170873f55eff87751f1ea355f434301043007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc3054518000004030046304402204c07b01639cac01055a8b8434ad69aa74616c0682ac759c38cb17e5dc50992c5022074216025fd4e4aaed6a1beff6e8929b8a688b5eb8f9ebfc9465a02d88dc45402
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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