blandforddentist.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:95:da:77:c1:09:1d:74:c1:29:10:6d:b2:69:2f:f2:6b:b0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=blandforddentist.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:95:da:77:c1:09:1d:74:c1:29:10:6d:b2:69:2f:f2:6b:b0Serial Number (int): 399441609899895318127574136249112614562736
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 07:02:c4:b2:2b:f2:b8:68:19:c7:8d:97:12:f3:ce:2a:44:94:40:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 71:70:5c:3c:a8:07:0f:e2:2f:d7:49:1f:65:47:42:7d:1a:75:f3:1e
Fingerprint (sha256): 9e:86:73:9b:f4:7b:ce:2b:27:dc:e3:6b:25:b4:c9:3e:35:24:d4:c0:74:4a:99:dc:f6:49:38:3f:70:47:29:1a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate blandforddentist.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blandforddentist.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blandforddentist.com
Other certificates including the domain name blandforddentist.com
(limited to 100 certificates)
www.trumpant.com
marilena.co
www.soft-storyretrofit.com
blandforddentist.com
karate-classes.com
sedonastemcells.com
publishlist.com
www.blandforddentist.com
elettropompa.com
publishlist.com
www.soverely.com
www.kiwi-fruit.com
blandforddentist.com
aconie.com
deutschelizenz.com
luigia.co
knightsforchrist.com
www.raurant.com
www.pharmadost.com
breakthrusafety.com
www.metricsocket.com
marilena.co
www.soft-storyretrofit.com
blandforddentist.com
karate-classes.com
sedonastemcells.com
publishlist.com
www.blandforddentist.com
elettropompa.com
publishlist.com
www.soverely.com
www.kiwi-fruit.com
blandforddentist.com
aconie.com
deutschelizenz.com
luigia.co
knightsforchrist.com
www.raurant.com
www.pharmadost.com
breakthrusafety.com
www.metricsocket.com
Certificate
The complete raw certificate details for blandforddentist.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISBJXad8EJHXTBKRBtsmkv8muwMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDQwMjExNDlaFw0x OTA0MDQwMjExNDlaMB8xHTAbBgNVBAMTFGJsYW5kZm9yZGRlbnRpc3QuY29tMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvWiAiDJQkeIblFrDc6QJDEaA XoBg1LPx3ansPAoTcFLm36eSINVwNeQJDt4MX5GX24jcomO7ijibMC4u6SUQ1R51 o/OwJjaN7yyRTPoEhs8MeS2TceQG6spwPz8eG8i25q4/2jSZlz5hgjwLBIYCL3NU Cx/gPaorn8cIzv+5ghLu9OxWul0wjdTx2+IxYe+dkQv/2JmnHL+AFg3zZJg0V6Di 4xCUzuiqAK0dXsDLDK4diOfqjutpr1ggLd2MzvfSlarDAK0tolaHN5d3T+GgHbAW D/LBUROoc0AbCAtIOpvWTlxjyvpS1c8AkQ12Y0SGfERawN4J/tz8PqHp2/K6QiZM fuEv4ZJ2/VFDMw6u/ThfVH5wlViv3WTlJWKW59o9nCc3Er/9zmly5AIwlMk1jN5o Ii7lZGdabaL5lkbYyQr5UU0YjlwIfL68D2pIFk38/x22fDxXr7pdtzIunXK2+7mG w1L9qXx6vUYK7yi69K+m3T+pL4cyjfrDVIgWHeULkBLGAKrfUnuXMeTEb5HxYYCc LodfXGyoZy5kuO6g7A84JwuJzxx6snDBTW6OenY+IoapXH9EPRoPpL7eKT9JZuIA h8g/fPso9CF0aGKIbFAHvoDHbSxxjvUDn4KYSX3+VyPdP1byzSrApwyyH3RYx2Lo qFA3ytk5UyXvRVIZR7ECAwEAAaOCAmswggJnMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUBwLEsivyuGgZx42XEvPOKkSUQJMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRibGFuZGZvcmRk ZW50aXN0LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisG AQQB1nkCBAIEgfcEgfQA8gB3AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQ e8xWAAABaBbYb6MAAAQDAEgwRgIhAP4eGFxYxUviU0vUW58C3wW/xtNknd1ECmqy BvaMrbjjAiEAxQubgj1SvHlXneXzVajX9I4hYdNuAobnNow3wJxo2ggAdwApPFGW VMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWgW2HGzAAAEAwBIMEYCIQDW mvbgKz86v+FlLIiMLqTApJTv2dy5q1z8rPAKmdv02QIhAIO0dhKVgJq5/cZPRKSA vOuGIdgsMq4ExBCjjLC/+dcHMA0GCSqGSIb3DQEBCwUAA4IBAQAvPTXnKbXa/DzI DrxeMYyyrF8sFr9k2xxPtPqae3skQX9ecqkYx8rRIurUNDBffBztaQGLDjAU8AST nOL0rYFTY6SWjJ2ualtOs799BmscfJ5EWijJ6byrfSnb8A8PXK3gPDVxaJmYBb8Z FwdcVUPG3btG0S5iQtOUx8liy28fFaSJ7wha7Gz8YSxsejJUN22nLir5lHrT45FD XTCN24mSDsIG9lMxmKKsL6tB5jpFNzKx6+1oRGuBZxzz601bf7ETWaWFBggHPzzi qdbd7+tSLQU/hKugBD77zsAcQLtBtzollJfhRaqstPe7AhKcatnWT7JnXJe4xoSo wMbzAnn9 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvWiAiDJQkeIblFrDc6QJ DEaAXoBg1LPx3ansPAoTcFLm36eSINVwNeQJDt4MX5GX24jcomO7ijibMC4u6SUQ 1R51o/OwJjaN7yyRTPoEhs8MeS2TceQG6spwPz8eG8i25q4/2jSZlz5hgjwLBIYC L3NUCx/gPaorn8cIzv+5ghLu9OxWul0wjdTx2+IxYe+dkQv/2JmnHL+AFg3zZJg0 V6Di4xCUzuiqAK0dXsDLDK4diOfqjutpr1ggLd2MzvfSlarDAK0tolaHN5d3T+Gg HbAWD/LBUROoc0AbCAtIOpvWTlxjyvpS1c8AkQ12Y0SGfERawN4J/tz8PqHp2/K6 QiZMfuEv4ZJ2/VFDMw6u/ThfVH5wlViv3WTlJWKW59o9nCc3Er/9zmly5AIwlMk1 jN5oIi7lZGdabaL5lkbYyQr5UU0YjlwIfL68D2pIFk38/x22fDxXr7pdtzIunXK2 +7mGw1L9qXx6vUYK7yi69K+m3T+pL4cyjfrDVIgWHeULkBLGAKrfUnuXMeTEb5Hx YYCcLodfXGyoZy5kuO6g7A84JwuJzxx6snDBTW6OenY+IoapXH9EPRoPpL7eKT9J ZuIAh8g/fPso9CF0aGKIbFAHvoDHbSxxjvUDn4KYSX3+VyPdP1byzSrApwyyH3RY x2LoqFA3ytk5UyXvRVIZR7ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 399441609899895318127574136249112614562736 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 02:11:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 02:11:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blandforddentist.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772718085431589808639526293125376637128439060148172080796125406386561484888438195516820602166944861779535127447810563756590332881942789615827051081446400725367918249312296663281259129902017714438616639799867478859847870582472354265057628761074657176544785700451860011152579606329680629470836273043639754932360774458215644702759457425684114321998121070222417603662905182441992748443581763570213789425742717422519846843189553946575825162067678556074919414457668015401182491785083841387642633985746716268898918306120571293597030874013544976861855830527007223589263192938382975455546584881479378656590553616112191428369895885873272901387342024743737907018164487661466113480515157276187304390280015329787038374535554920456616538641180414887509117380238190006399364573584672705659621005385328038951591143186565586135583096035165269032711290625004009010394542649818432130888053975988139782787060443502851534823800754511015429486722453421618349032351500396073790964556350105068518166558223481350244799678616183893152025355566930430038361296248546004587731349919836767676251060041995802687275459481592659359367789255811935912837772943158068119410639091721473719807897525190263097725801636172041047663839489639326435880833543364010576023472049 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0702c4b22bf2b86819c78d9712f3ce2a44944093 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blandforddentist.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016816d86fa30000040300483046022100fe1e185c58c54be2534bd45b9f02df05bfc6d3649ddd440a6ab206f68cadb8e3022100c50b9b823d52bc79579de5f355a8d7f48e2161d36e0286e7368c37c09c68da08007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016816d871b30000040300483046022100d69af6e02b3f3abfe1652c888c2ea4c0a494efd9dcb9ab5cfcacf00a99dbf4d902210083b4761295809ab9fdc64f44a480bceb8621d82c32ae04c410a38cb0bff9d707 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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