www.vacmed.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9c:24:7f:73:be:fd:bb:9b:99:7d:31:76:b2:29:07:a7:b0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.vacmed.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9c:24:7f:73:be:fd:bb:9b:99:7d:31:76:b2:29:07:a7:b0Serial Number (int): 314469421012105412943755066639016752818096
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 90:02:de:46:b5:48:f5:3f:dd:3f:5b:6a:eb:f0:62:0b:39:3d:a7:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6f:ea:59:72:b4:e9:ac:63:1c:ef:41:b8:38:bf:1c:62:16:36:13:7d
Fingerprint (sha256): aa:fd:c4:03:f6:3d:79:9e:b1:5b:73:b6:2f:5e:eb:f4:ef:fd:33:4a:ba:d5:e5:bd:8c:c2:3e:b1:c3:66:e8:6d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.vacmed.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.vacmed.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.vacmed.com
Other certificates including the domain name vacmed.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.vacmed.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgISA5wkf3O+/bubmX0xdrIpB6ewMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIxMTAwMjZaFw0y MDAxMTAxMTAwMjZaMBkxFzAVBgNVBAMTDnd3dy52YWNtZWQuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8LxaiyDbvCGjN7el6daThFRcKnwArxNc ip51Zel7CBxAFXtIW9h9RQ2x8Y3+EIUk8bOeye/t5DTEZtiXDLkOd8jlIwAw5iA0 E+am/eGP4jZDTzZvfOLnnNFymC6v4Svo1AYFcE8CJtuLAtRG3INyWFgNyJ0zDvhC ZkRa7+bibONL0al6+mf8Kt2H12fT7ruUS8WeY8goz3WRSEIuX609VYoo3lVxlN/9 MMb3ssDk5fn1kOw/puUGMUeuOg+cDmRVS9VnVV7Xqxsb/t8NiVoay8y2eK67itCg QiDZUaefn0HquCoIzTUjqYuosWB50PrP1UNj17dBJ1m975XKo3aASSgcVdlAibLY +80/I8DeKe6CkZPRS/nvQUaswUe74LqXWdX0PBHGfKqqWpHk6cC2Q6UxqO5Cfd9A dEYNwRK/e3SyWahooA1DtjR72P9SBrRuxC3jXjA9xqUPo4ccJEx1KuVscoTELxKV KABvLzuPSuz4uxKAg78n+HyVLutVJ6kOlYz+zUIUblqH9dM8KXylOEC8L1bQxE5k OnKpShitgdeErPdatOY7lD28AocTSmOs7YS+gT5EDArMLIjUa48NFkKt+CpsVrOD T8wErUsdc5zZnqytcoZ7FdgzIA2BWnf8CH8XWGazdy5dSnkQ+3ZxcI5wMYlNOhJC AA+wu3N6qxMCAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUkALe RrVI9T/dP1tq6/BiCzk9p8IwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg53d3cudmFjbWVkLmNvbTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbb/XYPcA AAQDAEcwRQIgUG5hQqYXgPAx19oY30I86td7BOPaEBSbxTlbeBCRCPECIQChU3uj G0KoqsUctx2ccWL6EdLNmVZdBlzTST4c/65+hwB2APCVpFnyANGCQBAtL5OIjq1L /h1H45nh0DSmsKiqjrJzAAABbb/XYeYAAAQDAEcwRQIhAI1ph/SFsTFtAN9q2LgS op7Oo+JgIn+W3HsulZAEs1DKAiArF5exMIpC3v6mhHjcQYV2cl4f0W8OIf5GFAbg bavNrzANBgkqhkiG9w0BAQsFAAOCAQEAlmhPaTTjSELgS2iugYUNCrlu5H04ngyv vg0/o0UGTM+fJE6fdp7VpwRCtNtOpGjjJGnjVXlWEAJeJ+OIZd5Szpo7OMFNUVcH ckHm2R9GX27UyAXjLQ6W9h7t3lcYRYVeJzssHL0EorR+/jCNRJLHK0iSyYjop5Em Jxz2cVNeLXTXFAQURRho7gwYxStepNEofCtpRP3Sy4JhOX54HQIRdKvtRUNOLluF Ba5+XVnsOFQikwa+PtNd3738Y46ycGxrDpt18i3QbXwdeTFtvsZ1L0QRfVOvXd0x FahUgTosqkfBGJumKE/NHotkhvEJSIWPxl+DlpN9r5d174cB07xdfg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8LxaiyDbvCGjN7el6daT hFRcKnwArxNcip51Zel7CBxAFXtIW9h9RQ2x8Y3+EIUk8bOeye/t5DTEZtiXDLkO d8jlIwAw5iA0E+am/eGP4jZDTzZvfOLnnNFymC6v4Svo1AYFcE8CJtuLAtRG3INy WFgNyJ0zDvhCZkRa7+bibONL0al6+mf8Kt2H12fT7ruUS8WeY8goz3WRSEIuX609 VYoo3lVxlN/9MMb3ssDk5fn1kOw/puUGMUeuOg+cDmRVS9VnVV7Xqxsb/t8NiVoa y8y2eK67itCgQiDZUaefn0HquCoIzTUjqYuosWB50PrP1UNj17dBJ1m975XKo3aA SSgcVdlAibLY+80/I8DeKe6CkZPRS/nvQUaswUe74LqXWdX0PBHGfKqqWpHk6cC2 Q6UxqO5Cfd9AdEYNwRK/e3SyWahooA1DtjR72P9SBrRuxC3jXjA9xqUPo4ccJEx1 KuVscoTELxKVKABvLzuPSuz4uxKAg78n+HyVLutVJ6kOlYz+zUIUblqH9dM8KXyl OEC8L1bQxE5kOnKpShitgdeErPdatOY7lD28AocTSmOs7YS+gT5EDArMLIjUa48N FkKt+CpsVrODT8wErUsdc5zZnqytcoZ7FdgzIA2BWnf8CH8XWGazdy5dSnkQ+3Zx cI5wMYlNOhJCAA+wu3N6qxMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314469421012105412943755066639016752818096 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 11:00:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 11:00:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vacmed.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 982116201307076572455385521207072150684234942881927692685372899052786119305874539300383470461083489397512503721057942505125582995826633881898523074312821045026595204272448524628700834077837789054597064256283032529600225520522047746508965908139642867053257244645118518626113290121646921217482496318594548431792540199950991271768117956280270788707430835724741449310265927292965184425381929248445351284220295541918512907522387044371376571621592297192537891409077483538777505236439153362479288132130650074281036232284689406243323125135913202831982973825059633687080097590093536533139250314745742857916365692231578765968399403432098547182373492374564562780623027418046331556130133522550074674525666058145136771403355405156332402690728440827624850376654157480923359430251891350633447954692659813043101023019785133709715550633465472136227732146398203938556864751486542000821803121391126896285670278343777862746354215285368428006309214008348001933593610644860071210990402150592058938391448238451995779292923290578993059861464980607081107834163788894953497963184251565835913088359101279946611192162804543515113994662181021008799645002960384945866391571602163286864421679711541093829640557170228284291913969864369154511488494843087304988994323 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9002de46b548f53fdd3f5b6aebf0620b393da7c2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacmed.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbfd760f700000403004730450220506e6142a61780f031d7da18df423cead77b04e3da10149bc5395b78109108f1022100a1537ba31b42a8aac51cb71d9c7162fa11d2cd99565d065cd3493e1cffae7e87007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbfd761e600000403004730450221008d6987f485b1316d00df6ad8b812a29ecea3e260227f96dc7b2e959004b350ca02202b1797b1308a42defea68478dc418576725e1fd16f0e21fe461406e06dabcdaf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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