massshred.com

Issued by R3

About this certificate

This digital certificate with serial number 04:59:57:90:96:73:64:ec:0c:ae:0d:2e:c9:54:fc:3b:a9:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=massshred.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:57:90:96:73:64:ec:0c:ae:0d:2e:c9:54:fc:3b:a9:e0
Serial Number (int): 378850667960889339635102684833176245479904
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:b3:bb:4a:a1:b1:3f:9f:2e:68:7b:4b:c7:0c:48:ca:75:27:ee:54
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:7a:7a:5f:35:f3:96:44:35:9a:c1:97:bf:de:dc:f3:62:86:ac:2d
Fingerprint (sha256): 8f:5d:7a:3a:b4:8e:cd:4f:5e:c4:db:02:2d:14:88:ee:21:8e:3b:6c:cf:1b:f6:67:b2:7c:ea:99:47:6b:7c:36

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate massshred.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for massshred.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

massshred.com

Other certificates including the domain name massshred.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for massshred.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378850667960889339635102684833176245479904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 22:07:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 22:07:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'massshred.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702555204160833644173682244806970260217672908385720855513022556171299316893755772752318803402133700025308473635640085943699573854451230476056217537494863957496541639676877329158979789928152929464650472043284858725099993633109185503677190244284288317733687149465780427428298006209405354806387544096290194308374453460650110529403216801459644635882353224650405991668343293153580040847425810760609008547621715762625303095879642491495947772269118204118976023407362810046650505455428557102332057085746949569271833445284408897966475622195685212604401947727319411501863367667263917354082788393544571199081339905355736911678760265581665866079800997269431301734915946875954365365211830219858075863532614527845834569900242655198204928152082869952998806211883243615742796326353653850120999763884865152329958298921522433531119600882261810462197022557692343555210023873411885444345239053849203442100603851794692789593998852628474026126807307179958639052348370115408743635970848305342783935316375006291160181205642348844041821779965571580554463561153094441519494172158808747962184205502109103938727448746456154908503261371626922627742916208626154243822750416818866900158368206100841181684532680962361037131453795576307130468636484933097242835003361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59b3bb4aa1b13f9f2e687b4bc70c48ca7527ee54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massshred.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf423c5bd0000040300473045022019c80ccd77c7c7a2101b0001ee419df73b882c861086dc318f3615dca04dac88022100f99337a6a79ffcea2c0eeb046a80e76902888fd1a7d2bcd1fcb435717b102383007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bf423c5cc000004030047304502207bce6ca92f9f87d0cbc7c5dc7f3916192448350eb28a9b5e47a9721896ae695f0221008b7b340553e21a8614f8029c631bc78cb5b99a1cfc8b0ed5f4a1fc668631ea5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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