www.venadvisory.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:fa:2d:7f:41:fe:aa:a9:95:f6:d1:35:80:5b:3c:f0:75 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.venadvisory.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:fa:2d:7f:41:fe:aa:a9:95:f6:d1:35:80:5b:3c:f0:75
Serial Number (int): 323941074175212007527058054751495164588149
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:8d:20:93:d2:3a:b0:6d:0b:14:31:77:28:7e:a8:15:32:b7:2e:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:bd:3c:93:60:80:30:ea:64:4e:7e:ef:2f:30:b9:ff:eb:3f:b4:d1
Fingerprint (sha256): a5:fb:d8:07:e1:ea:41:60:f0:31:c2:e8:cc:08:da:f5:59:61:59:ef:70:ad:3f:bd:c5:26:cc:cb:85:d2:b9:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.venadvisory.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.venadvisory.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.venadvisory.com

Other certificates including the domain name venadvisory.com

(limited to 100 certificates)
venadvisory.com
venadvisory.com
venadvisory.com
forms.gaa.aero
www.venadvisory.com
venadvisory.com
venadvisory.com
www.venadvisory.com
projects.venadvisory.com
www.venadvisory.com
form.diversitykobo.org
venadvisory.com
forms.gaa.aero
forms.gaa.aero
venadvisory.com
venadvisory.com
forms.everreadyautoglass.com
www.venadvisory.com
forms.gaa.aero
www.venadvisory.com
venadvisory.com
www.venadvisory.com
v5support.wordshark.co.uk
www.venadvisory.com
venadvisory.com
survey.freestylerx.com
forms.gaa.aero
forms.gaa.aero
www.venadvisory.com
forms.groupleisureandtravel.com
v5support.wordshark.co.uk
survey.evaluandosoftware.com
venadvisory.com
www.venadvisory.com
www.venadvisory.com
forms.gaa.aero
venadvisory.com
venadvisory.com
venadvisory.com
www.bachatavida.com
www.venadvisory.com
www.venadvisory.com
survey.venadvisory.com
venadvisory.com
www.venadvisory.com
forms.gaa.aero
venadvisory.com
venadvisory.com
venadvisory.com
www.venadvisory.com
survey.evaluandosoftware.com
venadvisory.com
venadvisory.com
survey.icisupport.com
forms.gaa.aero
venadvisory.com
www.venadvisory.com
survey.evaluandosoftware.com
www.venadvisory.com
venadvisory.com
www.venadvisory.com
forms.rockymountainroll.com
www.venadvisory.com
www.venadvisory.com
venadvisory.com
survey.evaluandosoftware.com
projects.venadvisory.com
venadvisory.com
forms.gaa.aero
venadvisory.com
encuestas.unete.org
venadvisory.com
venadvisory.com
www.venadvisory.com
v5support.wordshark.co.uk
www.venadvisory.com
survey.icisupport.com
forms.gaa.aero
forms.rotix.com
www.venadvisory.com
forms.ecosunhomes.com
survey.icisupport.com
survey.evaluandosoftware.com
www.venadvisory.com
www.venadvisory.com
www.venadvisory.com
venadvisory.com
forms.gaa.aero
forms.gaa.aero
venadvisory.com
www.venadvisory.com
techsupport.cloacina.com
www.venadvisory.com
venadvisory.com
forms.gaa.aero
www.venadvisory.com
survey.agilean.ca
venadvisory.com
survey.evaluandosoftware.com
survey.paragonmediaone.com

Certificate

The complete raw certificate details for www.venadvisory.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2IE/L8b8b//uHvYQwVy
1OC3NtRoE4MNnn90FFb0CfdK2gWLTdwk7Lm5jPvFzIhXrWvjCJ6VEUCi5JxmQXiE
wMRshtvONLV37kUKKb73M3iRJWvKEgRPxPgvHaqh4awKzNS7NvRU3wxgfrVrfcUR
ntvjbI85L5x8HczreZJFNcbWzPYeHyG3HzyQK9pcf+Zuzgsmp1cDJkFA0w0J1YyX
PjZk/q1dRL9NHvJa/9SfRq7HZQZ8H3jxdN6WSNKqPUK0cg1TPMJtAc+Goeu0ZbTx
6UiTeO7wvFj18M4WXO6xbyxKCo2GiQgkbpvhDVwGN0hCcPEc4xNvMonn/zvXKZy5
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323941074175212007527058054751495164588149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 00:52:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 00:52:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.venadvisory.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20120225697461026604587760299251437872926741090751441638661565266832236180997788687060861054461694267970160408474313716233322367935457001651246943681155774250548119202248060277749054212327467948991505667736431981711728983913381977116052043762933726491045705788370536644810877375925386301501434689622628582059884796937020376966839153890204723280292952384615679344312845306498123888497138007600200757130834537662835013331545210175788192844522233583823633311648800284409600562798699956249187264807744641832426776926327629985101991773220688521440064019927621667648992854055036654454176390142753274055474607054698445584693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef8d2093d23ab06d0b143177287ea81532b72e3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venadvisory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169a83f68490000040300463044022079b37976d63c0245801caa6f12a6355b21fe4c5940e2095c0389cc6ea27f273802207ddaf3c5a38e61d163b29009f8084dfd5646205323e310467bcf87dc6bca244200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169a83f6a58000004030046304402201a3d975f9446de58ed5fcd79307fd5b94a756b83d9c2c20f5b8dcee10c1c7275022079a52f4bfad73a2ecc6dc207e61d5968594b3d252975691d312e2ff2f8a29f72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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