chemflex.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:a8:26:49:e8:e6:c2:f2:16:55:18:b4:0c:df:41:a6:d6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chemflex.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:a8:26:49:e8:e6:c2:f2:16:55:18:b4:0c:df:41:a6:d6
Serial Number (int): 289803803359359374594403345616076284208854
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:ac:11:e2:c3:b3:b3:10:1f:a4:4e:7b:8d:f6:ee:64:a1:07:cc:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:dd:59:cf:ce:25:be:54:fc:13:51:01:65:bd:34:a8:3d:76:15:43
Fingerprint (sha256): 97:bd:df:7d:40:fa:97:c1:b3:75:97:95:fd:38:91:14:0a:e4:42:d7:53:8d:77:63:ce:27:24:65:96:b4:44:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chemflex.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chemflex.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chemflex.net

Other certificates including the domain name chemflex.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for chemflex.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289803803359359374594403345616076284208854
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 03:30:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 03:30:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chemflex.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848210690396526147774016348046502333658238837877847966141626878545274182335915580269346737379693683983948410940962911529983060245998698324724896530039726506697890643105256656666750683859811380702058659436989991007743098375851000757789208886288757247512576671478507990665789390805098105640409417167937971472714864644701218153028552366838039080088420889969444842706118931457769473463741619629017408927023773835284207096760206886199266685746566261679030852069231952429237497949457614375390861447071124292204799535973138684120838521869758596857034604518815888046387415847124804736417679230298161019993296801371621489182499156982816760928155151941517221405844382010843463598351563248429534646765279807618598022157495521063830910129639813798959882492095440710993184913313420975871626367888880173625597864355357532430174492563211303702109130683042931747704491805498044076116549405807709170414011915345090479734878699132834377329485055433793555550018260955319194224607956015840744865971808688149070915210418890003462280740407567580212088346244916683307705424099163225126135196271598964591465268731168978323641139496903463933419697145448363616212263092711869497159505511425192235161761991075958575692632262454735405205015551532156739854823507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06ac11e2c3b3b3101fa44e7b8df6ee64a107cc0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemflex.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc361bbb20000040300483046022100b14375859a2153a8bd5ded4a5b6fc3983795db140fa672954d323d49201c8be902210089b43d415f5654a29de1ac26daaab6ec681dce4183c029c9ef1d65d9cd9e489c0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc361bbbe000004030047304502210081433977cc3126f1224677b41691b28ba1fc1708713e23fb61e5d9fe0c3d58b202205a1bced89afb0fe1b0981414ff796b5d2b51921dee4f88b55e9374ae4ac87733
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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