graph.stent.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:3e:d7:e0:59:00:7c:ff:ad:91:1d:0e:b8:5f:5c:fd:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=graph.stent.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:3e:d7:e0:59:00:7c:ff:ad:91:1d:0e:b8:5f:5c:fd:8e
Serial Number (int): 321310087403240368077436329120670861294990
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:40:91:43:fb:a9:25:81:9d:79:b9:8f:e4:29:b5:f0:30:4a:0e:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:76:31:54:17:c9:29:aa:86:b8:38:2d:3f:ee:41:de:b2:7c:ae:97
Fingerprint (sha256): 97:65:75:bf:c6:6f:b9:2d:9a:c0:d5:3e:44:f5:60:79:31:a6:9c:b4:57:c1:1d:6a:69:99:f3:2a:1f:21:db:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate graph.stent.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for graph.stent.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

graph.stent.io

Other certificates including the domain name stent.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for graph.stent.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321310087403240368077436329120670861294990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 04:40:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 04:40:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'graph.stent.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909050279299493975198131126857020033523365802731713142823562333628624598094068768912535386157536883187307302536028156941858786761655323466533065100942049842682992451332740990561433343208217101722551378780356515051995967803803268829327538056314021087147018704781870601508507389949647416105907623851987581619330409869288061895648900803639064373806374985003561807581827031480168543876861609782149958976534123949197293582511505277671609288965989692189421989723386106271162043219455190526307315768589008476638240079871606996924672904247620908249285383202265545519825306808187587875899833153197829362496329821848360467492102773792491111695102778742269112383805358130688862266205317007472933648808619790693410890075351563264488612518123162328291816366010364536609663348269144581389555263754095309250539458369929167855154742349851834022963216321682420479716455471977120546692319576517695257127074035151645905795460165113515319822587905252649090652186179841099312856737213119803460352618289651822484892800787415412696398520232071978637526819791594705649215954367613553654352129559353065022390152407660629046412619367258392193168251973868030486734633065570127274670877990501359426213310161141210343072388866890754361029802577764230024825714917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53409143fba925819d79b98fe429b5f0304a0edc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graph.stent.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a1f827068000004030047304502207150cb16792d1e8461746a31c7fc70c1dbc1b0acd20f786cc0c645b7d26a9e66022100c79a4f0839905de541526567b91f8db030ac0f8db9df3ef3be06a3e85b17ed3200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a1f82706c0000040300483046022100ad8952af4a4ff02c60a6faad19c8c3afddec5bf1cf1449189bfddd6684f13676022100855622770e3ad43cc51660c3f1d35b37d04081e5816a287ecce8bf25d3970088
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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