sunhighway.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8c:60:9b:95:d6:bc:01:f4:58:68:6a:d9:0b:6f:31:f5:c0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sunhighway.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:60:9b:95:d6:bc:01:f4:58:68:6a:d9:0b:6f:31:f5:c0
Serial Number (int): 309104802896912592913637284516922240660928
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:83:be:97:b5:00:d8:ff:66:e4:91:b6:b1:f8:6a:77:e2:60:f6:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:40:62:76:b8:28:b4:d7:4a:ca:35:cb:b6:1d:ea:49:ce:f8:9d:84
Fingerprint (sha256): 89:f3:3e:a9:73:b4:a8:5e:88:8b:b8:9e:85:6a:a9:20:f3:d2:2a:97:c6:b7:ef:2b:35:a2:f6:d5:b5:bc:43:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sunhighway.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sunhighway.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sunhighway.com

Other certificates including the domain name sunhighway.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sunhighway.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1PJnS7shPLx7JoxlpaN7
ZGQKrnBZaGw6da6BUEUxSxLta3Xr07ugDelRUutpAtpR+xPthEjrI8Q1wfDhvvg6
Mi2DEaPl8ders892kGXbomkVhOxS163k2zXpWLy0qKojpUVWiUH7ak9oRS0Y6tK2
C4F6nGab/UOX5QyPy4uzAguqKuG4o7+Q6zm967sW0cN3n5/YPuAcDNeX/FqsX7q0
Fcma24KWF7u8qYkh+CKPzJfruJRQnjQLv4GPBqnf+CEgGOKTLRgNvpyEtpD1te/5
IwpPHMYXnjEvKuj5icFVnnOlxDBWHSw17AIPToy1u5BYcsdKIbOe5ppIpSUTvsTe
cmQdvI7VlHBmKvsgVOmoVJDpGXxuwm3aqeAN9ACsNLDFTZnsr+GNUWw4VO9j03UP
vqwWxeLWb4VdriU17JsvFXSKZIFQpFZZD/PP5YZtcx0j80Z+yuT8tSEsgx3zfePd
z3Ss/R3+2SKm1KVwtZfmTTVAPT8iU7b7S6h5vwkkz+JcieEGgcce+lwyM/+Pzdb7
X4Tobkg+le2/9PglgeyAsrsT2fbJg78iiAPM5jshgP4plH+ssOqJ260pif270/9I
Rtew1N5M2XreC1Alv24vxu4T4Z4u+VVwvYIMSqbJaDIns84kfa3VI086JjP8hDSb
1P10/Np4A2q2Y1uACHNnrxECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309104802896912592913637284516922240660928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 11:19:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 11:19:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sunhighway.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868747511162608903890006817178755416375738403660788320003590692355900762566082886920010177343093502562208033309347695733925825913449049536177975465521641670930637456557593977367655435876363731833959593931513352461528218686642265853551693886153431047538322584788283041606631085316550366732797553113529308021738002638358573822031720901947496924088372865662786695544764944858771710965593395651099798800523334228436971500049177022600981856495783452028568942508762799611242688096170160939688243959465669326301547852728398384143270084393490125937445439587286767398939697052871318610759001077657094982553795635769963510121510547582426520447608773885447699591242708617672095980790227091999550831725053978236465745530051670381767970123951176617459439083911332206867142460899454571905520120783140185885610456750933681390526317897169977155847891823355414538118291425057578665830937869339210744622656475312335129783048328247436605014540102694246305554074092073303454384013586967612117777951261266184208685757475496458231693515791696584794164360985764722145216962360379430111131182417771200970106464256418003565734499969441012556776671377553798111346117162314448086702760183694376591983540223504064628466785860506478095122067373116887139703303953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c583be97b500d8ff66e491b6b1f86a77e260f6e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunhighway.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbfe8b719000004030047304502206a187ee5ae5d35ca1cc602281149e19f2784ae9fcf089809a43f00cf76235056022100d1f6f6cd803232513ce63b473011e9e5353d0689eb9d70015964d74894235501007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbfe8b8620000040300473045022011dde43b7b6a3910b92633f15ce342418c2b3167c524f5dd1d06ee80103f226202210091a40517d4f746b7fe229cdcefe7ab95a7bf83ef7caadb0074e2a161a3a69aa9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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