www.2s.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:25:b7:70:44:47:6f:fa:fe:13:68:b8:db:61:13:cf:cc:0b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.2s.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:b7:70:44:47:6f:fa:fe:13:68:b8:db:61:13:cf:cc:0b
Serial Number (int): 274171137016695967447662901656346436815883
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:bf:a4:b6:e3:69:e8:45:c3:d6:4a:b2:1e:ee:9f:69:f0:6e:33:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:27:71:81:3c:69:e1:49:ae:0f:03:d3:48:a6:6d:ae:4c:49:e7:f1
Fingerprint (sha256): 9e:68:15:8d:91:fa:c6:e6:f2:c0:89:e3:ca:59:b7:5f:d6:cf:37:da:90:21:eb:e9:a1:35:c4:b4:74:43:fb:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.2s.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.2s.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.2s.org

Other certificates including the domain name 2s.org

(limited to 100 certificates)
2s.org
2s.org
2s.org
www.2s.org
2s.org
2s.org
www.2s.org
2s.org
www.2s.org
www.2s.org
2s.org
www.2s.org
2s.org
2s.org
www.2s.org

Certificate

The complete raw certificate details for www.2s.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274171137016695967447662901656346436815883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 20:58:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 20:58:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.2s.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835900600237944301160720954756600213003691992468289921008514516808592522617577032668086840518786508623385591924461926206384146709490649048480661239253962876187594670219852663340881618793838010936836479140430598124805980193949836948744494450814239391386950316355415826893368997390648684424404541452278848457145814600582972367383309183007243794692171450576027903301139588921739571269824347312606922421924046436690073086701429243837379613802832664109969491652264898852834634885535805512158176339554390439814165962529576166888484197988756675146022680881472560502500956162708008392365894812074626504894817866224035214762997711117122620603935189939765744322783715128549663180534678991123829407020141594146504372126266509832984090232720281266793429963810310545853214969701589980367461745859296029898804885001391551096371007269090901956921736949463800901450615096261302953592221809594504966133619223560579832472929177518590456635984270134216591231210109835992313532831141323892379038988425562229027242133919698784016331880784587135709741168853324653235698603702757156650671743853987646918876583487311980182286714919234226487430572399115435004373402033198201636722363170941424106678321005830588676523513162452992490036456180959045466610092547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccbfa4b6e369e845c3d64ab21eee9f69f06e3347
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2s.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbcd4e9bc00000403004630440220241e68bb408fcbda639bf060df66c0c75b1aaba1ea02ed43be4ec7ebda29e87002206e7f0932a3d0ef72695fac69018165197544a1a4fa3cc8a7f9580770bddc4e7f007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbcd4e9c50000040300483046022100d97a3cd7aebde378545a2b66ca29c6d7eb9d0a60bd79e0c127ad6d5a6075857a0221009e0a852b8ad4882badc48d802dfbb479661c6203336decfc6a5725b9da273f9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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