expicorp.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0b:04:57:d5:31:ae:59:cb:10:e4:0d:f8:5f:ca:e1:c7:14 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=expicorp.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0b:04:57:d5:31:ae:59:cb:10:e4:0d:f8:5f:ca:e1:c7:14Serial Number (int): 265085736797310279717527706148995023882004
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ab:11:ef:97:d5:f8:3f:0f:f4:6d:58:b1:cd:9d:d7:19:19:2a:ba:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6d:1c:4a:4e:d1:42:fc:07:10:35:cf:98:ba:c3:8c:2f:d4:92:85:8b
Fingerprint (sha256): 8e:fc:9a:9d:2f:a6:a2:b2:17:47:62:3a:c0:be:3e:78:82:a6:ae:f0:f7:fc:4f:bc:44:45:d2:72:6d:0e:16:5e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate expicorp.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for expicorp.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
expicorp.com
Other certificates including the domain name expicorp.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for expicorp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISAwsEV9UxrlnLEOQN+F/K4ccUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjMxNTU2MTVaFw0y MDA1MjMxNTU2MTVaMBcxFTATBgNVBAMTDGV4cGljb3JwLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAL11loXJQ/j26VgD1QUp3QTLSYnZ2HagMnLJ /HwI4JEkzEUgNlmyYPp+n8/ZN9Xj+BBNOxkBfRNJUMfXOwNXFmsuWxpr6Fdpy+bz a3jBV4QqY5gKhFdl8O9dmdGsCYyHjASvgvu9XeiA1A5k5sF9bUXcnBcws+9TUCSo sd0CKTXXUqe2WL5Foeq3ci0nRP3MgYhltP7L4ru0KxkVqaJ8DiEwpLZ4mV5wFsz3 XdKvb2eEZmB7f5K+/36RsNDVOGAjIhUTWxTWGoqrxpF5LgoucY3TbOnWAy5KPkkh IWt1LbmUjYTg+0+tKzH4OxF9D6QAx7IkzSXkh576WSs2biy1CSta/fZKVSygusAN 6o7bsgEn7uexK6AfNIPo6WFkIQnQrnKigTo8aB36VqQnEY0z+pwZKaKSjtM1CkPz r3q24MrBpMKB5jizWpZtvVNjjtcRX0n0GP2MDQg59dw9xlFvX6wUXoRjusCLcEhB jK/Awp42mJpqRfwwc3IxmsmExSikm70KVzrpjF959HlS7TeLqYnCss1qgrf/qUpj Wa7z/NOas8ycS9v1PGe6NdSYy7HDQNi3DQeb8h2JU4tKKzQckz3k0pV4Nuz9zASY wSdFsFVUNpKe95ArzQWoyWK5NOZSd9nbELv/4wCMMhsqaHytsk2gkzsT/h3vDSwY VHUQ+wX7AgMBAAGjggJiMIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKsR75fV +D8P9G1Ysc2d1xkZKrq2MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZXhwaWNvcnAuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHcAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwcvpd1wAABAMA SDBGAiEA4kkyG2XaJnXITZNliU98+BGrudU3s3TnPQuhWbzLwIECIQCmGh29hSZm D9Q0K2NG3wUhwFOdRe+ouLmjCAaVZHiqCQB2AAe3XBvlfWj/8bDGHSMVx7rmV3xX lLdq7rxhOhpp06IcAAABcHL6XfgAAAQDAEcwRQIgPfqzfSYrjPnzLfIV8hbxYiav M6XoodLodR9PbcjtQzsCIQC+kmU8tSIbyG8Dt/by7sdj0SgN9f9eEoT75YyOLN7w ADANBgkqhkiG9w0BAQsFAAOCAQEAmjLzhsCuku3AeGDMJR6+6p0CL/w3JLJHPrsJ cku6c2/kAGJXFwT7qN7eqjkbXzvRia5UxDEwr86H7wMw5fITAUqzgUyku1larcBd sskihOT7pi2eNMtLfsXSE+GOCE6RXK0XBDRKGfO0zvWkBOKwmqweOzOG0WdEvRTp 4HQrnPsdnq92FAxr/XgSi4CGOjIR5U/PUIlaQcGRIZvKDQUffskcQlOK5HLa6Tk0 xCVgVk4q5i+zmdTSaaE7ICKh2gsaKjUfUNcfZvpTHFrHFm5+o8/67pdznLxKkkOy kNj13/6JaHgRSYEfwBLkn19N9HKvwQweSnXgkS68VwYbQxtKSQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvXWWhclD+PbpWAPVBSnd BMtJidnYdqAycsn8fAjgkSTMRSA2WbJg+n6fz9k31eP4EE07GQF9E0lQx9c7A1cW ay5bGmvoV2nL5vNreMFXhCpjmAqEV2Xw712Z0awJjIeMBK+C+71d6IDUDmTmwX1t RdycFzCz71NQJKix3QIpNddSp7ZYvkWh6rdyLSdE/cyBiGW0/sviu7QrGRWponwO ITCktniZXnAWzPdd0q9vZ4RmYHt/kr7/fpGw0NU4YCMiFRNbFNYaiqvGkXkuCi5x jdNs6dYDLko+SSEha3UtuZSNhOD7T60rMfg7EX0PpADHsiTNJeSHnvpZKzZuLLUJ K1r99kpVLKC6wA3qjtuyASfu57EroB80g+jpYWQhCdCucqKBOjxoHfpWpCcRjTP6 nBkpopKO0zUKQ/OverbgysGkwoHmOLNalm29U2OO1xFfSfQY/YwNCDn13D3GUW9f rBRehGO6wItwSEGMr8DCnjaYmmpF/DBzcjGayYTFKKSbvQpXOumMX3n0eVLtN4up icKyzWqCt/+pSmNZrvP805qzzJxL2/U8Z7o11JjLscNA2LcNB5vyHYlTi0orNByT PeTSlXg27P3MBJjBJ0WwVVQ2kp73kCvNBajJYrk05lJ32dsQu//jAIwyGypofK2y TaCTOxP+He8NLBhUdRD7BfsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 265085736797310279717527706148995023882004 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 15:56:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 15:56:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expicorp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772926623780227045165964295205628054325820114964507207927876331625909672902914692948469386954847536509817388474720823067051774648705319406725133512677005397958229639828555558684445774010308984419919259131243768138301933355942353726140866279046470902086336444016728469989284671205756128456796632697013827876130722464214036054631167129904333186148010450546501461538986962737046752559177851605046659983893801592831413875325966775724421175529314720972727764973918325105061796695497051330763714396182007703694308620334199109485714508044296708618857420920285010057632987661301054833320503691403181047648374199375392066142282694378405692494359783528537380466054289326083561160197921575405065357703835883292368804807125857126615714133581335561750311065250306755826291524621310677472509282806614546553305204141943827531324410323597944663755714248939485264394022464413319977785222628092188965160655410430017531443055236434454595053871195271532274969736433936569192185604617174211863776436100805578488965039775163128142690108697012075283142404249396154855116185747052784761483342954599030316485161044977978181424429828733280479223181768838116091137299428715920404016558633149753766369750494273782054245554119265346112425196439494208865634551291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ab11ef97d5f83f0ff46d58b1cd9dd719192abab6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expicorp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017072fa5dd70000040300483046022100e249321b65da2675c84d9365894f7cf811abb9d537b374e73d0ba159bccbc081022100a61a1dbd8526660fd4342b6346df0521c0539d45efa8b8b9a30806956478aa0900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017072fa5df8000004030047304502203dfab37d262b8cf9f32df215f216f16226af33a5e8a1d2e8751f4f6dc8ed433b022100be92653cb5221bc86f03b7f6f2eec763d1280df5ff5e1284fbe58c8e2cdef000 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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