www.mercersigmanu.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:3a:b6:ca:2b:c3:63:06:61:1e:72:0f:33:fe:b1:26:cc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mercersigmanu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:3a:b6:ca:2b:c3:63:06:61:1e:72:0f:33:fe:b1:26:cc
Serial Number (int): 333895046271738431333275126446001742751436
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:ce:fa:84:b6:84:af:4d:37:6a:03:b2:2f:23:27:36:6a:86:bf:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:2f:ce:ed:56:27:82:73:79:66:ee:6f:35:9f:dd:68:97:97:11:36
Fingerprint (sha256): 8d:6b:ac:a5:4a:26:75:02:31:95:71:bc:48:3a:2b:68:98:19:29:c4:06:14:72:3c:40:95:80:f4:ac:7d:bc:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mercersigmanu.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mercersigmanu.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mercersigmanu.com

Other certificates including the domain name mercersigmanu.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.mercersigmanu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333895046271738431333275126446001742751436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 08:31:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 08:31:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mercersigmanu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771236073529362851750596069842909183267812952527655237385843863173226264106467824395874918301987975943457117095964954359830498959738875530000482499993193611326425979070442831766807386228321187305369879788295333231057500630164521026769392178716429523377771250804722501874674167423472845782567319030346218926606811235273850215722005217778512886346381861819088201115491347600540159665627420521353202548541936184825770052769611744401702113024624765776901148081099789425078169148962466757731948902155790398530037037247536482358789885500281731727580758092357593995726656929441732770997444204039272229536839610775422363763123685156017097030131177240660348671256107545727818663512235647397895611809273213497723975957619292867990421560226284676503950412923382788231825599613431098285177499778780655169903220126204260648111642238671957843682326317977767535629136219570801804151633313879054765522987663583971612455126070519321598905025727371256540956656876543764088846534315824287977342849287369807527651115684050797559710310014932508541139728783012455988693006946890712525439237336049415566149414792710868172516912291144560258547938510107756686613491854065915305087609977442408782153830539373309428832249997719735528167983003290253349910892703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28cefa84b684af4d376a03b22f2327366a86bf71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercersigmanu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001701efd57ea000004030046304402206ddda7b43f7122adfd42e701d0cf49052ad052bd6cf70de2c75c9ab0095f319602201465d81c2012b61bd5b7ed989cda2e55ba70d7455ce3ccd6cba1be64db3980fc007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001701efd58100000040300483046022100b8c344f03dd44640ba08639f51f3994813f576f10a31baaa99763ea434ce23b3022100f0730939b487d4e257bad20a09187cf1e7a011fcb7d6e3b24b6789189de57f02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002578036482b56d6a2e3fe2a5e32dcedc63360a04862a063cf48d820f4f70d7b906d3c9cac03f956e3fd1420d7abde99af830e9e4ee42e8dceb6ce04500d646080334fb6b35c85ebb0a63083cc334b7ba44a5bb7cefa5d90cd566c82e64fb123cd7b2201417fa4635643c0550e352a445f024ec54cf18e2063ebcaacfd63e62c0e3954774c936a0c4f19ae971a19f19fb72cd9ec9065862000fece56bbd01405a7c672363148d8787eda7ec4109e7189de0b04800a0ec38b5785cf59de7e9dd54b4da029477f6e79f48685eb191185b90112c5e552678c588dade7bc81ef5f4f352c3b2ff1790e396aa8eaa10b2081b0cd7c9f3710c421cca1f558e3da16060de