www.resurface.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b5:2d:12:95:57:e3:8d:8c:95:eb:c0:c2:35:be:16:ed:29 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.resurface.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:2d:12:95:57:e3:8d:8c:95:eb:c0:c2:35:be:16:ed:29
Serial Number (int): 322987877958166681970427249111551071153449
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:35:ae:7e:7f:21:c4:0a:87:b5:3e:dd:b9:62:e5:8e:a7:13:6f:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:17:8f:d4:8c:38:7d:e6:78:1b:29:13:6f:6c:10:a9:6b:89:38:d5
Fingerprint (sha256): 9e:71:df:54:b1:bf:13:a4:2c:2d:4b:f0:15:87:4b:3a:2b:27:e9:63:64:9a:d6:c8:d1:fb:de:83:2a:cb:f3:02

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.resurface.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.resurface.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.resurface.net

Other certificates including the domain name resurface.net

(limited to 100 certificates)
www.resurface.net
www.morphtv.co
epatientsurvey.net
havan.auction
resurface.net
resurface.net
resurface.net
resurface.net
suami.co
www.resurface.net
www.resurface.net
resurface.net
resurface.net
shirley.tv
www.resurface.net
resurface.net
www.resurface.net
resurface.net
resurface.net
franklyn.net
www.resurface.net
rocketsci.net

Certificate

The complete raw certificate details for www.resurface.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISA7UtEpVX442MlevAwjW+Fu0pMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDgxNTI4MzBaFw0y
MDA3MDcxNTI4MzBaMBwxGjAYBgNVBAMTEXd3dy5yZXN1cmZhY2UubmV0MIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyMe5salzhnaKAa9qOVDRqn8udEPG
ouaAE4dGTP96ZO1/UWIhDx6MmrVMgpz17lDNcMwZYJ3uhMmy5/gjKhnXU2+QxXhD
bicRnfXIbQF//L1y4QZBwNnyrMIgsr49QItCL9OOwJG69itoRuQ0xE/6YK2FAJGf
PGW+jv2ScN0BuA5oZ0T2rUp787CIJDdE5CpgAPcTam6FaCw+168XGR5xOnK1GfhN
HWiTwHMdB1xkxXQEDH47yMSqCCsF4FQ2Z46MnCn5LO4eRdSxTgL+AnITM9xROfdT
dYKfVgBz1/hkAXSS6xVJruNZgujSkYndr5TprJ7RSjhIvECis61eG9jDUaRPjKHF
hcdQPLCxQduh5ALRAfndq2QDCulSiWKRMxBCxjniTeOqiHOdEuXww+itECzqmmnI
dVQuvAa+1buDiKL9a+Gl4/EDJH8/EiegI4P4eVnu81cYC1PlGj0kv9wqQyl3N92j
HhF5L3QUGKclnhGV6hrS9018BKbQtsEToYbm3ze3uHBpCVVMQOqRYFXXrfARBgTp
cDCSGlMi0K2wYRLakaflZQk0rNYc2ewKeb/5xIjf9Y3g7BPdUOK5WuTYSccM2J/J
sxILeDH3jd/g8wQE6lr36xssh2FyfIPyOW+6TidLfqODobGbm843LVVICmrpwMLh
eg/egYOHy1H2eq0CAwEAAaOCAmcwggJjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
YDWufn8hxAqHtT7duWLljqcTb3AwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghF3d3cucmVzdXJmYWNl
Lm5ldDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAAB
cVqfIHYAAAQDAEgwRgIhAL9UYwy4fCUNypF2MVOj0ddiKiBb1CpSI013Sw3j2n7C
AiEAhWoGQWpH+iPd3y4Y+Lewcm1RvVgCpDHa8bNRjPTu0tQAdgBvU3asMfAxGdiZ
AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXFanyCsAAAEAwBHMEUCIQCMzuHw8NLr
YjAt9vGmWCdosSL9kLOOf2cjQ+03WkNhIAIgL/B+MkbDscotPlFYWz1xt9Xheofm
PfxTDlInB3dnYrgwDQYJKoZIhvcNAQELBQADggEBADMrxEzAQK8efxEmseDSdGpB
nPEfTLIkCiGZMSSRRzkr9kWYvDdvbXfEBUHbdYkju5/nbig5XQgnLKBcT50UzpV8
6g0yGPpvfKrwAVmB7PVa2MV3Y+vLUv5PltogzUaMxxXJZGtgw/gQ8LTAAEsfGdkw
iverptcLvrb512C08N7scrR20BzZHFIFVOa/CdE1y3g5lQ85XqeDZQ9i3TQLc/jJ
YhywkQjoPfrPvQLNlN0LD/uS/sjBEPxtQ62vUkeJk+pNTP40qepxAspUm5af2KX6
S/qPblFl1jIfRNz5bgq6qqMlINyzyI8RQdrblLqtu76WiQKxBfr4VSJOC3GCc2U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322987877958166681970427249111551071153449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 15:28:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-07 15:28:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.resurface.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819111658953049163527706481173498351820502796914732480720454649302044574024324625490268391957692064634698416004388732355909648062072992368572330574814865649032106370622646876517505571681024107157334044691580925001524660389947718427751024333557935278473521358721596144400116762939002379915259752523984759540912669661084553108109332277932378670119501755353379208653670937720487061617232117221249047899591383957002451543949326827306779351751036883372662129597286303740949615807594378188432028064751045406777458106307365635555755441419661511045974913573902739800042520849108442890004591135258795639970981525040050398015425504561200072555148606717008457421100058471290782394415892017372019800587391308992653831803075455377604469311914413428657495609771248943356476175355268131874000045885179329514286214905040328828083009051894193354979998894038931058561528404862809557824489274750238273509905102649077279581071229828134638963205613230218194054765598952427078962967391155505941073396563369650035485773172379053988993918291696100458335117792064118513767134799182670434936292414774204275229068417877930323329667659998870000921688385518662740423199021005694483475358892156347721548942317744408623079753114139423197857396687519931683325770413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6035ae7e7f21c40a87b53eddb962e58ea7136f70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resurface.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001715a9f20760000040300483046022100bf54630cb87c250dca91763153a3d1d7622a205bd42a52234d774b0de3da7ec2022100856a06416a47fa23dddf2e18f8b7b0726d51bd5802a431daf1b3518cf4eed2d40076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001715a9f20ac00000403004730450221008ccee1f0f0d2eb62302df6f1a6582768b122fd90b38e7f672343ed375a43612002202ff07e3246c3b1ca2d3e51585b3d71b7d5e17a87e63dfc530e522707776762b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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