www.minnesotanationalguard.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9a:66:c4:3c:b8:1d:92:3e:61:e2:4b:78:8e:df:f9:63:2a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.minnesotanationalguard.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9a:66:c4:3c:b8:1d:92:3e:61:e2:4b:78:8e:df:f9:63:2aSerial Number (int): 313876942478391307543254477018917796143914
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 73:d7:ac:dd:96:54:09:c8:67:cb:07:d1:02:a3:5c:a8:f6:33:a8:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c1:6a:7b:cd:11:bc:da:07:9a:5e:d4:42:e5:1d:df:ba:9b:1f:c9:06
Fingerprint (sha256): 92:1e:3d:3e:4b:05:64:0d:e7:88:d7:35:4e:e4:d5:cb:cc:68:b2:b0:96:17:35:fc:58:63:21:1e:30:7c:65:43
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.minnesotanationalguard.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.minnesotanationalguard.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.minnesotanationalguard.com
Other certificates including the domain name minnesotanationalguard.com
(limited to 100 certificates)
minnesotanationalguard.com
www.minnesotanationalguard.com
farm-blog.com
minnesotanationalguard.com
minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
farm-blog.com
minnesotanationalguard.com
minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
www.minnesotanationalguard.com
Certificate
The complete raw certificate details for www.minnesotanationalguard.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgISA5pmxDy4HZI+YeJLeI7f+WMqMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTkwNzA1MTdaFw0y MDAzMTgwNzA1MTdaMCkxJzAlBgNVBAMTHnd3dy5taW5uZXNvdGFuYXRpb25hbGd1 YXJkLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALRHRlugsGkF 17VrcyREDJV2JeYOPK+/72XRatD/PpDwh+xMb8/aPCSb1EvrgMoV+oeJsCpBDZhA DPpp1AoZcTWqrLBGxU9+q1dKeGLqJ/eNAWJI4L5FLv/a8jkWcdXa/TFoNKlA2AsG Y7/LrPYsV2IxwiFqYggiarRUYYaWB5KSPx5RxPZPJ0TXOdad12Pyh/p8Gmwsd0z8 n/l9p3jVjl3BKdGPx8K0t0AYyAuOyecQYPEBa0w8Ta7upuCN/Uq/1eMpqqBYGZrr BSGZSZNnHTzNAHpBoS3AlOZIu8yZHlFFSbCC4sGRDLZxZ5YTuRJ3CYdaVdPJQ9b3 gLrzCY5lDFQ7/t5cu8VHQprcGWCrOC8aVAMRIRiVhlyylN1A0vyqHwBC1phjfwqK V8Fdp+af1PgjKUF2Wli42rl6oIQwRMNwxxkB35GcGDK2ruSOp4EK2RYmvCTXNcul I4/yhgvO8yCKrVIUWX3bH4F/J4LnEwG0rFtHEdBYE3aOpED3szb2QUTD/9asgKpP OOQWWuEafK1pokeDFgi6CE6FfLWBtruHdaE1Ao65U+raNOzxIMbLTKzmcv3Wfggq 6Gtd55CQVq/WfbxbM2vGut8xkQS7IHX5FLJdu7mNGeb8T+jTGeDEj4OiVnLtujQE HKtrGz8Nxbz2MoChazfFbmh7ErXmfC+DAgMBAAGjggJxMIICbTAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFHPXrN2WVAnIZ8sH0QKjXKj2M6j5MB8GA1UdIwQYMBaAFKhK amMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYi aHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYj aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIe d3d3Lm1pbm5lc290YW5hdGlvbmFsZ3VhcmQuY29tMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA8JWkWfIA0YJA EC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFvHTCH/QAABAMARjBEAiB5Pm5JKK4j l6zGeQ4Ob6DR2ZWqDnk8wYmt0H959fxWOAIgKsy906ywHynXRThP56vrrIZ6+4jt rLlp3cmWpieInnsAdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAA AW8dMIfxAAAEAwBGMEQCIC6+BEoXSp+syOgIEeRGQ6G74BKVTmZCIyTKtiTi09rP AiA//SJcQQiQrr4dM/8oRbQhuE561wW8UOJlKFRcWGTA0TANBgkqhkiG9w0BAQsF AAOCAQEAPSEyGgO5HzSBTzlnwu1MNxZhHGWx2oJdjMj8lmMZQacLw5QT5V7Sd6ou qxB2/XJ762skcom/lk06XiyY3kSxYZFL+dlwVoA9zpHwQSbKh8ZMdIbu8O7d5Jb/ zaQdasYq2i3/MZL3MksIJl1HL3RDjhiH68MzSaUbt0vQzZv13ZpJRJoO8O/76cp1 a5rTD8Z1PUdG23GuIbEN4FFA0AmnMI1t5WFZIUvt+zpJUKt2xUVj8e3XlsgCo+Nm VM4XXagogDoU1ykLkZTbktjl2Q4uSCaBq9n4Rbe16wM0IgqqLajcodRjtN6U/Hd/ OTgl5XdXJbNWz0zxG+h+sVfgnJEjQQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtEdGW6CwaQXXtWtzJEQM lXYl5g48r7/vZdFq0P8+kPCH7Exvz9o8JJvUS+uAyhX6h4mwKkENmEAM+mnUChlx NaqssEbFT36rV0p4Yuon940BYkjgvkUu/9ryORZx1dr9MWg0qUDYCwZjv8us9ixX YjHCIWpiCCJqtFRhhpYHkpI/HlHE9k8nRNc51p3XY/KH+nwabCx3TPyf+X2neNWO XcEp0Y/HwrS3QBjIC47J5xBg8QFrTDxNru6m4I39Sr/V4ymqoFgZmusFIZlJk2cd PM0AekGhLcCU5ki7zJkeUUVJsILiwZEMtnFnlhO5EncJh1pV08lD1veAuvMJjmUM VDv+3ly7xUdCmtwZYKs4LxpUAxEhGJWGXLKU3UDS/KofAELWmGN/CopXwV2n5p/U +CMpQXZaWLjauXqghDBEw3DHGQHfkZwYMrau5I6ngQrZFia8JNc1y6Ujj/KGC87z IIqtUhRZfdsfgX8ngucTAbSsW0cR0FgTdo6kQPezNvZBRMP/1qyAqk845BZa4Rp8 rWmiR4MWCLoIToV8tYG2u4d1oTUCjrlT6to07PEgxstMrOZy/dZ+CCroa13nkJBW r9Z9vFsza8a63zGRBLsgdfkUsl27uY0Z5vxP6NMZ4MSPg6JWcu26NAQcq2sbPw3F vPYygKFrN8VuaHsSteZ8L4MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313876942478391307543254477018917796143914 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 07:05:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 07:05:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.minnesotanationalguard.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735471775838807762172834169680166909879100617937410181218475135714661885932958063377401151336287049494205044667383220919082838392374466214053799890629261064576281548325090464924093952748735282954695655849823305821759766154569245861539414286189926871913389784005179400712766253353899434963173741064596244002621668940274781201994433626220924968812602054039393355019095492532013978757137845016665399981908317329247650516924409983411698252657985306356228346102235588469523253138529423691522184234965827404534128745886700852553495583636629694687657376861397086612985220715773327874666148048171851719705634185372847776755029627216624845984303009976195339511498503063784488602206863266877181165588978727188598166205649166302327207454184294365758059464948446555277080408314311828458903143969596697814555131972502549379885484018485299758349600123153649680784166059816626460079143207128194615116897239280462186147119312696041444083851919106882899644503677278438131660490708685705136874204315613472671559773438858134817208436002643779079022139505504884742302351273054829248720691738238713511852379042933683225249304971746485530899798148976369203161468561302995418547938007765029069442259516508381483456816386942513710282408237255936637679710083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 73d7acdd965409c867cb07d102a35ca8f633a8f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotanationalguard.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f1d3087fd00000403004630440220793e6e4928ae2397acc6790e0e6fa0d1d995aa0e793cc189add07f79f5fc563802202accbdd3acb01f29d745384fe7abebac867afb88edacb969ddc996a627889e7b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f1d3087f1000004030046304402202ebe044a174a9facc8e80811e44643a1bbe012954e66422324cab624e2d3dacf02203ffd225c410890aebe1d33ff2845b421b84e7ad705bc50e26528545c5864c0d1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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