www.benchflex.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:78:01:6f:a9:81:40:9b:9a:23:e2:cc:71:70:42:7e:dc:bd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.benchflex.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:01:6f:a9:81:40:9b:9a:23:e2:cc:71:70:42:7e:dc:bd
Serial Number (int): 302172650836708088970725746606516081712317
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:a1:87:4f:6b:d4:8a:83:2d:98:6b:3a:71:1e:e6:7c:13:70:d6:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:32:d9:c6:e3:fb:37:35:a8:3f:30:89:95:4b:c0:35:81:d0:ae:68
Fingerprint (sha256): 92:10:64:bb:ed:f0:47:49:93:69:45:d9:44:75:64:ea:25:1e:02:ae:c9:35:34:fe:94:6b:09:84:35:1f:58:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.benchflex.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.benchflex.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.benchflex.com

Other certificates including the domain name benchflex.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.benchflex.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302172650836708088970725746606516081712317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 13:19:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 13:19:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.benchflex.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 924339154983802469490349761783107608054707552763068055722214377543821912908450113168974688486838051694933262209532599463017593748890912602562794605305324196731364025552764348044788584713425796725125448850264130985160451394349673081865684552926665091933462561974340336439704596263621640257873593664000971130100791474366580773711753903416271668253733571839307861397374680037345686486155046751256406243039268915335176530177368315961119000765330342990350878909154586812673135595756794871782378850640953088817080570060061967901176527662488815333598389234605115174012779678198286406944562456473350940562973012157729357766341135170815542978758789092986897039976193460158886277112861906526958453748463073102306118099787140030468736510510060696089020263071655768140724368111109781482486542377102308520007163229988458943473480502133582361358332890318349213787487349899108857004772630959057267797185095798983980876683293864097994901725566881932400149782351952398634687056634421677422688612789777604249420888642943681260986209415823356973241671576492951270349538050187899689033051663979399133089427239764518373532734285973734217607390106540933034660794844549034930198475303066721334706358590310788177646343869581152109497189604103495753030716769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bda1874f6bd48a832d986b3a711ee67c1370d662
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benchflex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f143a5d610000040300463044022054081043e53012167c3a08e736b3d800066bea8b9c48e47991831398708599290220271fe5f57d586bc9fb94305c4bd0e2ad75923f1adb834e55382e2671aeda7653007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f143a5d4a0000040300473045022100911f07d51dd7650aabfe6820780f4bef0e713f21d8a7fe170cf4addcfea33690022039e50c06517fa361bd45e607e1cd7064c8b9de96c93bb46425f742963578d98a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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