www.friendsvblibrary.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:66:4e:14:a8:37:9b:39:34:77:41:88:b9:4b:ba:f6:71 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.friendsvblibrary.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:66:4e:14:a8:37:9b:39:34:77:41:88:b9:4b:ba:f6:71
Serial Number (int): 310813787672517576982266975240325097518705
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:36:de:78:54:29:c7:0c:e3:38:8e:e6:ea:69:dd:3f:c5:e6:49:2a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:56:1d:93:16:98:5e:13:1a:9d:75:41:26:6c:f1:35:87:61:2a:3b
Fingerprint (sha256): 97:b9:3a:25:27:d7:cb:7b:fc:6f:47:bb:2f:4c:08:a6:5b:5e:99:27:3f:2b:5a:2b:90:cd:8f:fa:4d:2c:ed:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.friendsvblibrary.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.friendsvblibrary.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

friendsvblibrary.org
friendsvblibrary.org.barlowcomputers.com
www.friendsvblibrary.org

Other certificates including the domain name friendsvblibrary.org

(limited to 100 certificates)
www.friendsvblibrary.org
www.friendsvblibrary.org
friendsvblibrary.org
www.friendsvblibrary.org
www.friendsvblibrary.org
www.friendsvblibrary.org
www.friendsvblibrary.org
www.friendsvblibrary.org

Certificate

The complete raw certificate details for www.friendsvblibrary.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGx7qeC5b0YcyBCJ55PS
HgPOci5xl1PlGXB5EX0bt5NFHCbGAMqAb4KvG9XQmZ34i0vuTb9AbRIYYslYcTBP
5LciEzkJEEbxth+oceyF9c6n+CGAUSkNFpa1biq0CVnPGnR7KHSnR2xXgiKrtmWx
JoxGfXV6yWV+Gv+Alh6DSCUw+MmlY+zdE4XMCbWfpQlk8sGRlNZUV1egkzZs5VXt
JJz1AnweutmD2H0AJ6qDRlXR/Li1qzgAz3m45NVDWtKCfCMTO013VwcBCXLW8XcX
eN8oLI/RESr4FmN3PshR064FDpGl6QtPKsrUz0V3GQ/idi1BWErujmCm2XPtZeA5
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310813787672517576982266975240325097518705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 08:18:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 08:18:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.friendsvblibrary.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25301155984317258675769986116280742465542696081338540675782372564723168324632884560139111922376824764076262902701628065734913665808850326768369444955293425958311704816684320477589948980935421493568829956813164702524643679954701952649149296555436917288312924699280054321179561195815601209140184911045695841825511881471862836345292741815813503926299184391330529393295076560272221771164614881807256781755462616560025864418318895467605717658551507197896812190966140264171764723705329805759159038785807268863248608106396110996172063633503178883360419743802250085791019204786886368811549529850475832788501581337865148709351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a36de785429c70ce3388ee6ea69dd3fc5e6492a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsvblibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsvblibrary.org.barlowcomputers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendsvblibrary.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016be053b4c10000040300483046022100e2f11fb718f9fdbb46c1453419a626380e5fe8b263712c08227958f78b8fda75022100ff717834409d1c2f49dc2853c5cebe7dc5a9d0aae78d3351d7ff01aee36f682f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016be053b346000004030047304502203041beb84f950ff86f6c0a937deabe84d21c1a6c5c90d519442d15a72fdc6cfa022100a4ae7146f46e08357a29f862f6a37ba489cda1775fde4d1b76a5fbac08552669
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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