www.hermitagefoundation.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:7d:ca:bd:89:89:b9:98:d9:5b:eb:bf:9b:ae:db:dd:33 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hermitagefoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:7d:ca:bd:89:89:b9:98:d9:5b:eb:bf:9b:ae:db:dd:33
Serial Number (int): 267629146587568467975557730299855387745587
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:0e:0a:fd:f5:03:05:0c:63:f9:1b:ec:69:99:c6:12:b4:9a:d0:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:d9:07:df:79:26:db:ad:d4:46:0d:7d:3b:9e:b3:ba:9b:dc:90:60
Fingerprint (sha256): 8c:c1:60:27:90:6d:84:68:f6:ef:7c:0a:42:b4:2d:18:9a:a2:4e:c5:cc:c0:c5:46:90:cd:3a:0f:3e:0e:e3:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hermitagefoundation.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hermitagefoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hermitagefoundation.org

Other certificates including the domain name hermitagefoundation.org

(limited to 100 certificates)
5272653.ca
bramptonhomebuyers.ca
bramptonhomebuyers.ca
trade.limited
5272653.ca
sundayschoolmadesimple.org
trade.limited
technology.world
dredging.global
www.hermitagefoundation.org
trade.limited
5272653.ca
technology.world
ny.world
technology.world
3808.org
hermitagefoundation.org
bramptonhomebuyers.ca
localbitcoins.ae
technology.world
34755625397.ca
bramptonhomebuyers.ca
lumber.cc
hermitagefoundation.org
technology.world

Certificate

The complete raw certificate details for www.hermitagefoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267629146587568467975557730299855387745587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 08:33:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 08:33:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hermitagefoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808385986633237031086165019204665213260791742055619856911381049736156671629327583669922057279737354281278812814885512921672702632636010668342105656929031911927809122008950485037431175531703324177111634464533315123841038613264612585741221925725552319624019905496210229374502156626207734829367041539839289627958888205439406846347383353476392460217311670456309086287361407415031087955182274453172214957513232727417951976601488757137561587895983286860775636429465083677480854543168406325893156867147678216382819589573553903932927786488556040159435272310550380452069907422344268277250627508173965866420021157810163103141864210845032572731229606779531022865240851096603796674290041305479349277845717530528880424777003277061730194617531881183885178934150080137679398702966257222764651895632888592545202868400050160694429063185667035873117724353499090899785756435156800629401712741050064091305471855982714073917974945624029300368945511347315325950069982023399635351346095020914827381380148986719737075446621223358626497615203775814718947725355065599581625384382811401087738472313394928163439805571244772974092891497925443616844035963028664381162383897941782876489874706222605226690799582049516287105429395219267981552268703587449658913859299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f0e0afdf503050c63f91bec6999c612b49ad0e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermitagefoundation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7f5a8457000004030047304502206c9f3471a3a4e6877c072ba90a727ffb3e5d1042e578c95d9489e2fd8b8fd620022100b04f1741c866c4e78d7316d1200acd4cb5c9f44e9f64c0a8db824beab854a9e10075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f7f5a8511000004030046304402204caac4ec4d971362ad97c242055e7473a8b4e34cf222ae8ce93580f93810aade02205ffc215dc1a719df99c52533d08b63acfe1503fae214398ca6c7c0d135dc0109
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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