masterag.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:72:a7:f8:7d:61:28:8a:fc:49:dc:36:b3:8b:d0:e3:7b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=masterag.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:72:a7:f8:7d:61:28:8a:fc:49:dc:36:b3:8b:d0:e3:7b
Serial Number (int): 293135522063994043846913774323046238184315
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:69:6a:fa:25:5a:3d:b2:30:f2:54:57:82:29:d8:71:d1:70:9a:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:85:7c:22:99:3a:69:4f:22:6b:e8:a9:f5:55:c1:7d:53:5e:af:09
Fingerprint (sha256): 98:4c:cc:24:4c:4b:6c:c7:ec:31:96:db:61:7b:61:0f:05:9d:a6:7f:14:72:22:7f:e2:05:58:1a:c5:63:d5:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate masterag.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for masterag.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

masterag.com

Other certificates including the domain name masterag.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for masterag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293135522063994043846913774323046238184315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 19:32:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 19:32:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'masterag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726462966230515461438163785041457928399332138738632338904478981556723094950874940398433395051833598487562062500570242902219199229624672600058197869463149047180160758188183893819219759134404209974806743369502673481332475405849434948763040214237477520622579294312899108065140259165542617991966389624799171841989547949787022205403534052032879934519969952478035148427156040158831587501005446383109076108567612832276339557238549856444601088177695297611977310802485946404130629030175817311111599357570790199795868067379881267958475492063688370808309358044807941806974593498388265628797937620490027626778530134145047755480603562874832921180131600384070602920094580053252798379182946322958321685955388542836954806485781085010073439225394472332739456885301984802340449189058220394892828779855568587861920281337373664296160541860667918847287392967684202506727688555631924848714927139746127697767008933807153394175368038076267343119611384816814879138782515183764648172687805735878172250090385106480531044593178585811735858146090079129838450190546454540117919463311945296226968253757656598030726868206275303837958055359226089719021543728050062193509598433146939947117092692565084081606474341803455984841960888347146157409473746399755308042963141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d696afa255a3db230f254578229d871d1709ac4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017054da85b00000040300463044022071db91b28941b318c772c0a0ee05cec63b3c4f60fe85ae1dd0714cab87d4b55902205b490929a13ab40574099cdf4c3887065c0da8447c70c0c15efa7cb0cc1f55ea00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017054da85c30000040300463044022074e0bee3ec9a9e92fa633e5742d7bea1638b7fe78a6b91b601a3e260edcf315c02204fa458722acde4e8b3a6db430c0206f9252f8d55814d1ef5f31417fba8bf7cb4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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