www.praxisacg.com
Issued by R3
About this certificate
This digital certificate with serial number 04:3d:d7:53:dc:f6:ab:b1:94:0b:a3:c7:da:87:d1:cd:1c:8c was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.praxisacg.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:3d:d7:53:dc:f6:ab:b1:94:0b:a3:c7:da:87:d1:cd:1c:8cSerial Number (int): 369492587570624625558679933016290783730828
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a6:f9:dd:ee:74:19:c4:43:51:c4:b1:03:cb:26:db:11:7a:5c:3f:88
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 32:3b:e3:47:7d:cc:a2:c1:2e:71:1e:94:4e:b0:77:e5:cc:9c:a7:bb
Fingerprint (sha256): 8f:fc:eb:4f:02:71:d5:02:93:06:fa:7f:df:10:88:69:03:b7:21:85:bc:84:40:75:51:30:95:1e:83:4a:db:ec
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.praxisacg.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.praxisacg.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
praxisacg.com
www.praxisacg.com
www.praxisacg.com
Other certificates including the domain name praxisacg.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.praxisacg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgISBD3XU9z2q7GUC6PH2ofRzRyMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAzMTAxMTUyNTJaFw0yMzA2MDgxMTUyNTFaMBwxGjAYBgNVBAMT EXd3dy5wcmF4aXNhY2cuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAwy3bw8ydgI8jRnrNI8RBhdMAREEmlsn+zMxnq0Bfur/jSZSq99lUD6Euw5fZ jn5jf4fa0QTks9QCApyK88IUbRYwHNojqRi3yhR9fO08jU4Yx4N3V9RuL9oV1Kmr OWC9t9/WimrHJ4ZjiufIux1z5julN3KRtGsBwz5qQxMgVyMaL0wYdYs/or2qLhBu pG2ryJfQMovTd1avJEmPky4YXijt140ohVJmNK7Giij74GbgOLnuMp0ip2Kdy9S4 RGCFFHt8LG79R6qRR+3yjybKiGQtd15xmnucITlht5IHAB3MV3anqv0RsF5JZLPV lLsq+TpSB/jdm25zkMKDqfUJI9YijjbG9DTCSDbPvI5v5vkfsY7SCfhmUyNBpVwm HdhCsB41c1G92eLgZU8R0ZgOYl9ZGR8/lgedWzC9meDXt5p2DUT4ngYdYRPmbdwo vZqSXXCq4IvYINF2MXIEN39E+Gfc5msD8+KMmMfdZjPXZVW1+T7m5OvsV3kbpK+F xkEERRRcMaztykZi2itQEIAE+n6tgNuq7LtnBbZf9bWVrT3ihNwPUpwyDTvuKUB7 2LHcxZJn4LwL9BGnQD+LFWWaTrNsUV1ZwFwHxO0wrLNJVnbwQ4kuVT2U+5HrpncJ t9Cj2gbtWsWs+fDtxzr0tHU/ZbhrT9tlggAh0kVqavZK+QkCAwEAAaOCAlowggJW MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUpvnd7nQZxENRxLEDyybbEXpcP4gwHwYD VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0 dHA6Ly9yMy5pLmxlbmNyLm9yZy8wKwYDVR0RBCQwIoINcHJheGlzYWNnLmNvbYIR d3d3LnByYXhpc2FjZy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qf NcSeHQmBJe20mQAAAYbLlM4DAAAEAwBGMEQCIDinMMWfqcpaLgxX/uRtlGJpvp8D 2GLdjiQJMAKmxPQsAiBs/c9rC6mh7syrCbYQSCdcW2+plVPZcg3/KTI+RjR/lgB2 AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhsuUzhYAAAQDAEcw RQIhALIfre0FmnPs0FQ1jdg80jCmp73VIFlvDNCIMxWkYjDTAiA58TAuJtft8LR6 Yp3Yzzw8uT8RJ+Kziu06KPj7+47ZWTANBgkqhkiG9w0BAQsFAAOCAQEAb5sHzJAg pVXYXpRHnCwAzZ3AwKCbYzwa9AkyyqLMA/02L8BKTcy8GmpAb7rNV8j+ByMCS1hW lypa7wWQgKiaeDbbqaFcsU7F/4Q2PmZdd2luQmu9FdWDRYJ7fMTzg/ioOt23U/6l urZOFJEVi+VhUzFG5AEQlUUefVBI7mNDu4milLHOHUQnChvJtjvf10HCwZcwiWOs 1+P7OHlKrpE0xwHt4PBmASFXH0Kn6QnpmnxM3zJvx9wiYIVbg2JCeJuuKXFCFDPb jAwd8Xj9Za8edXpXMLFJKJP3L7Qne+X6rLBMj5VviW/bVidBbxAMHXomWM8w6fmz sct+iTNN0Id44Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwy3bw8ydgI8jRnrNI8RB hdMAREEmlsn+zMxnq0Bfur/jSZSq99lUD6Euw5fZjn5jf4fa0QTks9QCApyK88IU bRYwHNojqRi3yhR9fO08jU4Yx4N3V9RuL9oV1KmrOWC9t9/WimrHJ4ZjiufIux1z 5julN3KRtGsBwz5qQxMgVyMaL0wYdYs/or2qLhBupG2ryJfQMovTd1avJEmPky4Y Xijt140ohVJmNK7Giij74GbgOLnuMp0ip2Kdy9S4RGCFFHt8LG79R6qRR+3yjybK iGQtd15xmnucITlht5IHAB3MV3anqv0RsF5JZLPVlLsq+TpSB/jdm25zkMKDqfUJ I9YijjbG9DTCSDbPvI5v5vkfsY7SCfhmUyNBpVwmHdhCsB41c1G92eLgZU8R0ZgO Yl9ZGR8/lgedWzC9meDXt5p2DUT4ngYdYRPmbdwovZqSXXCq4IvYINF2MXIEN39E +Gfc5msD8+KMmMfdZjPXZVW1+T7m5OvsV3kbpK+FxkEERRRcMaztykZi2itQEIAE +n6tgNuq7LtnBbZf9bWVrT3ihNwPUpwyDTvuKUB72LHcxZJn4LwL9BGnQD+LFWWa TrNsUV1ZwFwHxO0wrLNJVnbwQ4kuVT2U+5HrpncJt9Cj2gbtWsWs+fDtxzr0tHU/ ZbhrT9tlggAh0kVqavZK+QkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 369492587570624625558679933016290783730828 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 11:52:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 11:52:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.praxisacg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796261398653226132907761191418888295984993834843600707655761287059829513363424975464238821506476150144643138017991524220713614675232754239346016378656003459100927461966149422832403153293250037777578044723279998493335393209790914556476045069434191799615655379019237262737227254843900155277825208546860616435265281622102741625567905758701506979843371302438343195421530948269556293081009905431683755581073057800882714141086423950390849665466165226884365058569814588872056534894908934449698610734474012562149842229473713233302224180736987172930072006118795034438396132650382234090910806158342600576659450450649212568714437773222372874632575362648887927192209012702023873188928800278978306578645185249924580933918099886434136580869143358525468241484393056762621298848792181242210295362401908311334606681331017885792442879643087248565573098401416753870479723974098061497592795502044971738148414500949449813480166605635124373300763108324947284559490257490860944771146565390545710193643666434916749513871749950925406326571295432867878103344260074893267819900433830281493690463907028686981376225905835174533842924093081607230567485653427907455553173084849592374525168213542863498923119238894123450289046947557798664363219075790588927820888329 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a6f9ddee7419c44351c4b103cb26db117a5c3f88 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxisacg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxisacg.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186cb94ce030000040300463044022038a730c59fa9ca5a2e0c57fee46d946269be9f03d862dd8e24093002a6c4f42c02206cfdcf6b0ba9a1eeccab09b61048275c5b6fa99553d9720dff29323e46347f960076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186cb94ce160000040300473045022100b21faded059a73ecd054358dd83cd230a6a7bdd520596f0cd0883315a46230d3022039f1302e26d7edf0b47a629dd8cf3c3cb93f1127e2b38aed3a28f8fbfb8ed959 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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