www.praxisacg.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3d:d7:53:dc:f6:ab:b1:94:0b:a3:c7:da:87:d1:cd:1c:8c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.praxisacg.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3d:d7:53:dc:f6:ab:b1:94:0b:a3:c7:da:87:d1:cd:1c:8c
Serial Number (int): 369492587570624625558679933016290783730828
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:f9:dd:ee:74:19:c4:43:51:c4:b1:03:cb:26:db:11:7a:5c:3f:88
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:3b:e3:47:7d:cc:a2:c1:2e:71:1e:94:4e:b0:77:e5:cc:9c:a7:bb
Fingerprint (sha256): 8f:fc:eb:4f:02:71:d5:02:93:06:fa:7f:df:10:88:69:03:b7:21:85:bc:84:40:75:51:30:95:1e:83:4a:db:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.praxisacg.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.praxisacg.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

praxisacg.com
www.praxisacg.com

Other certificates including the domain name praxisacg.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.praxisacg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369492587570624625558679933016290783730828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 11:52:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 11:52:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.praxisacg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796261398653226132907761191418888295984993834843600707655761287059829513363424975464238821506476150144643138017991524220713614675232754239346016378656003459100927461966149422832403153293250037777578044723279998493335393209790914556476045069434191799615655379019237262737227254843900155277825208546860616435265281622102741625567905758701506979843371302438343195421530948269556293081009905431683755581073057800882714141086423950390849665466165226884365058569814588872056534894908934449698610734474012562149842229473713233302224180736987172930072006118795034438396132650382234090910806158342600576659450450649212568714437773222372874632575362648887927192209012702023873188928800278978306578645185249924580933918099886434136580869143358525468241484393056762621298848792181242210295362401908311334606681331017885792442879643087248565573098401416753870479723974098061497592795502044971738148414500949449813480166605635124373300763108324947284559490257490860944771146565390545710193643666434916749513871749950925406326571295432867878103344260074893267819900433830281493690463907028686981376225905835174533842924093081607230567485653427907455553173084849592374525168213542863498923119238894123450289046947557798664363219075790588927820888329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6f9ddee7419c44351c4b103cb26db117a5c3f88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxisacg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxisacg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186cb94ce030000040300463044022038a730c59fa9ca5a2e0c57fee46d946269be9f03d862dd8e24093002a6c4f42c02206cfdcf6b0ba9a1eeccab09b61048275c5b6fa99553d9720dff29323e46347f960076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186cb94ce160000040300473045022100b21faded059a73ecd054358dd83cd230a6a7bdd520596f0cd0883315a46230d3022039f1302e26d7edf0b47a629dd8cf3c3cb93f1127e2b38aed3a28f8fbfb8ed959
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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