mainlocker.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:a2:bd:89:92:08:7b:eb:98:b6:2a:5c:61:31:5d:a0:e8:1d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mainlocker.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a2:bd:89:92:08:7b:eb:98:b6:2a:5c:61:31:5d:a0:e8:1dSerial Number (int): 403826825566009964947119909343936743794717
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5a:62:37:58:47:c6:e0:c2:e9:1a:0a:5b:8e:92:0d:2e:a4:fc:08:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6e:09:76:9b:dc:17:b4:df:56:d4:b9:b4:06:68:81:90:f8:da:fb:92
Fingerprint (sha256): 8a:48:75:b9:6a:6e:15:78:7c:29:dd:76:91:3b:de:db:61:41:d0:ad:b3:52:c2:72:0b:19:7a:ee:6b:23:1c:19
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate mainlocker.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mainlocker.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mainlocker.com
Other certificates including the domain name mainlocker.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for mainlocker.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgISBKK9iZIIe+uYtipcYTFdoOgdMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MDcxNjEwNTZaFw0x ODExMDUxNjEwNTZaMBkxFzAVBgNVBAMTDm1haW5sb2NrZXIuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAud+Pp/387aHBIIyUj0iVfwD+eB0hLgfP ypB8h2HXKFbusY+kwTeygs9WQFUBYj18VLOs23EG02H4VR60XOhCmBoDufjSJ8t3 5zImCHyMS/g8Mmf3JZIkwXvPAuSIonxqdZnaqOdahb9BVbMdST8DKhNnWpfVY9yI WN9TcNK7eNCut+Dz+3f0sHvT1RWjzxFKe2KxXxmZ03L6whJ6rOoXpllgpqTk4TGJ s+z7qdIF10XWID3PXdSPJq7rGAZ4jzz2p4WiPMD5i8dkF5dfWOwZtEUs5hsaC4Kc xHUQrR3hlc1xx2Bp7U6SAfsz/OVHz9EM5mzQGuCteRJVBfzZQQwsnX0BRspaeq4b /K8cfiJDmF6O3YKkBmVJkdm+v3y8lL4STWTeW1illSB4SF0v3hJmTTzpPHpPD+DY bsn//uVS1nc4mLqvepsd8M1fyLqOWL4I+bR41rPSIGzozCfyNETyuEIxnTxGyolm 9e7wzHhcK2OlgsXe+XDxv+IzREjU9UlePlonrCo5B/UGFxR63VaZfebgz692JNl9 ht9vfMGJrrtxgX5+2757aIDMYF/QXckZ9ytY1wvK589jM8wcx5yGGZ4hz5yt7MJT C35YVVgw40/Odmw/AGHcDUe+KeOEiwhX/Ihyv8I99GJvoopfd5IF6jz6LF5SlO0e 3EZYiRyjqjECAwEAAaOCAxYwggMSMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUWmI3 WEfG4MLpGgpbjpINLqT8CI0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5tYWlubG9ja2VyLmNvbTCB /gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCB ngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkg UmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUg Q2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQu b3JnL3JlcG9zaXRvcnkvMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAKTxRllTI OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFlFV7DoQAABAMARzBFAiBB940a J3gJ5ANaJ63OsxeKRbBXiuje4ejm3YB0Yi8L1gIhAN6HION/T5MB1r5PuuB61iT0 azcc/BgBru+NEXaxiFtQAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo3 2RMAAAFlFV7D3QAABAMARzBFAiBqxwLg6pKz4zUXeTZbb5rXfKyDBdTe3eQSCRll fUe99wIhAM5uGTim+Y+nABvA+eWphSJayXwl7M5QLYY+Ovc9+qAnMA0GCSqGSIb3 DQEBCwUAA4IBAQBcGe3uP9j/ZKVLRABIlcUUjv8O1P9ez+ISuv/BLG6Pryrm1J6y oCrzHKcxHBn3l3Pvp4rHWtUoszEPViZFwU6G2P5MZ7O8VFZgbrCorSEWB8AY6DBw LXaSGNv1mYb8DZZ5d+HwbKYA13QZLhdMmtPITm+PH5bKKg5xYFfyKD3VlYysViW4 ECdyaS+MR4c6lGe/9KYZycgELCRQJ0hE3NGB3bHoY+UO7im1Sprgq4lUrBqOuUuW u+nKJIKPhIlJywmVF+Ghavo2G6PMiyOG1lP50efHS4IVQSKr2q1scl0ATBef1TWe BlZTc9gdF6m8r+mXE8goz5QVQO8nHnCC5/2s -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAud+Pp/387aHBIIyUj0iV fwD+eB0hLgfPypB8h2HXKFbusY+kwTeygs9WQFUBYj18VLOs23EG02H4VR60XOhC mBoDufjSJ8t35zImCHyMS/g8Mmf3JZIkwXvPAuSIonxqdZnaqOdahb9BVbMdST8D KhNnWpfVY9yIWN9TcNK7eNCut+Dz+3f0sHvT1RWjzxFKe2KxXxmZ03L6whJ6rOoX pllgpqTk4TGJs+z7qdIF10XWID3PXdSPJq7rGAZ4jzz2p4WiPMD5i8dkF5dfWOwZ tEUs5hsaC4KcxHUQrR3hlc1xx2Bp7U6SAfsz/OVHz9EM5mzQGuCteRJVBfzZQQws nX0BRspaeq4b/K8cfiJDmF6O3YKkBmVJkdm+v3y8lL4STWTeW1illSB4SF0v3hJm TTzpPHpPD+DYbsn//uVS1nc4mLqvepsd8M1fyLqOWL4I+bR41rPSIGzozCfyNETy uEIxnTxGyolm9e7wzHhcK2OlgsXe+XDxv+IzREjU9UlePlonrCo5B/UGFxR63VaZ febgz692JNl9ht9vfMGJrrtxgX5+2757aIDMYF/QXckZ9ytY1wvK589jM8wcx5yG GZ4hz5yt7MJTC35YVVgw40/Odmw/AGHcDUe+KeOEiwhX/Ihyv8I99GJvoopfd5IF 6jz6LF5SlO0e3EZYiRyjqjECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 403826825566009964947119909343936743794717 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 16:10:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 16:10:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mainlocker.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758296847694777442035286900026202199560385039406234313704034747103950067591533864717449198331240575133068234144262776530866670941211745140988585731820535296658330170207164048565504252107409668666969419637784284722387786771779005199418390638641401922395144101504080632939277848834019750521597284573762087254858710418631876830496884302939386414642984077168024019821039323303916328830323533699618486236033989595117547209490173533497925252846474650086351515878584285710110492943445158857982286426624575795415836431759455898909720340440909869771924544596597787361266851591163516903383141533810611964219917505668602316817273081822755816957273908403872223318038389643017690206866948007755710968841020526454847129723759066700138768330730437193264302154413353250110127142520530179286695649934672678862557123720622787516152089678824761974272976324669813682240866954128083510814300828611870706592629846917659208045448295945064917625791007400535197687686952832607420251604145405663951268239670162022153248302033009916753345699828740584757134787101107211484840020022443417695910491065405138436649638062978045491190256441981501071564830097349797350689717232476959300771832009682343628337946530816836537214034548987740919289569742208837044647733809 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a62375847c6e0c2e91a0a5b8e920d2ea4fc088d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlocker.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165155ec3a10000040300473045022041f78d1a277809e4035a27adceb3178a45b0578ae8dee1e8e6dd8074622f0bd6022100de8720e37f4f9301d6be4fbae07ad624f46b371cfc1801aeef8d1176b1885b500076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165155ec3dd000004030047304502206ac702e0ea92b3e3351779365b6f9ad77cac8305d4dedde4120919657d47bdf7022100ce6e1938a6f98fa7001bc0f9e5a985225ac97c25ecce502d863e3af73dfaa027 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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