michiganlecet.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:3f:5f:ba:1c:54:01:95:af:cc:8b:3f:16:c8:07:bf:29 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=michiganlecet.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:3f:5f:ba:1c:54:01:95:af:cc:8b:3f:16:c8:07:bf:29
Serial Number (int): 342408299529172678239008943329566670700329
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:75:34:a2:aa:46:47:f9:9f:12:f6:87:25:a7:e5:c0:b5:d6:9b:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:65:21:1d:d0:e0:7a:bd:a0:c1:29:31:51:66:2e:6b:8a:2a:ca:79
Fingerprint (sha256): 9c:52:48:34:25:56:dd:2c:f9:21:59:e8:91:12:60:d4:93:9a:55:46:bf:58:23:f5:bd:e5:f2:ad:43:6e:92:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate michiganlecet.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for michiganlecet.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

michiganlecet.com
www.michiganlecet.com

Other certificates including the domain name michiganlecet.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for michiganlecet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342408299529172678239008943329566670700329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 05:59:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-12 05:59:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'michiganlecet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881953751982362588605922392094135269917267784036932679461529662712000989848689538792533757515911250099802739247367154005615390997063184413164994524486404337209646699824086001100387804310168814340754534884264272123475960031222452370223831232317552040897585306528381151815681928519913140560399485954539287406346174171949413880011978085533685260156542453125126739210680021700650846999202413990285473313854763203246210725030516283070979419945823769737870105614125446978065221913025913681420222000400838310095209683161843009825039303314499473852000668847410276510322243278140719765830458404385969649536553803439915751470402325517589588745812420685256591239379752516181375956223529247829181136759284863766160155563170437371324529405241820806102905111597834706620269122403499476895590386565537552767269391727724328454830687303832660244215069306290981785549300326678070816884149426424074856746475527428453662475783766335384587499920530390504180583655880370938000516705634532471469427826647714732784386513209336076819054796212778925828517252239954597445887677883658386897395912323054461445078448406305021722810211253070566664775216845210887077769642666615570290797995470969231229634872552758979575979916747383633901226329160021700359375523959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							707534a2aa4647f99f12f68725a7e5c0b5d69b60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michiganlecet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michiganlecet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168db5a52870000040300473045022100b72be975425b7518b399826ff1415567ff252815c07e0b16ed45bcb049978634022043aff7c80921145ab2655b51b7438dbfb6d875a31e6e96134660880d353c1e21007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168db5a50e500000403004830460221009bfbcc799b69b1d3ec820a9547a392df15ea5e519e9622b812518ab8465f08a402210088757297c7ef59a47aee98b269c7c07c739404a4c410954f11df404daead1ef5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00370d3b6d2cc176b6fa3fee600be86eda04bd6f18285b45875c2e8b39874de37a1dda825b777a6ddf7f2ce429a27cbad759da30d2e197422c95472db211e94a0c871274368616e02caa75bba397bd6a33c41da32df381a1c1605d3ea1d22715e32bb4cc9c3b3685affd5dee8f0d8924c7974ffd0309474da0438b433dcc4e2a30b7e6bc2a75b5155b512217759defc4416bfb4dcc5649b5df6d1bc138c4b903c6cb00241da60910ed0a4c3d894dff423736d3557cc361e75efdb07fb5a91ed887e6768db480af1e9fce1cf1805ba6635d692852ca6bf12457e7864e1074d720dbf1bbdd42f1d295c9a85f5d072fe2e988cac99f4f9624e8ec0ac474bace2afc81