www.vacmed.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:24:7f:73:be:fd:bb:9b:99:7d:31:76:b2:29:07:a7:b0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.vacmed.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:24:7f:73:be:fd:bb:9b:99:7d:31:76:b2:29:07:a7:b0
Serial Number (int): 314469421012105412943755066639016752818096
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:02:de:46:b5:48:f5:3f:dd:3f:5b:6a:eb:f0:62:0b:39:3d:a7:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6f:ea:59:72:b4:e9:ac:63:1c:ef:41:b8:38:bf:1c:62:16:36:13:7d
Fingerprint (sha256): aa:fd:c4:03:f6:3d:79:9e:b1:5b:73:b6:2f:5e:eb:f4:ef:fd:33:4a:ba:d5:e5:bd:8c:c2:3e:b1:c3:66:e8:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.vacmed.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vacmed.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vacmed.com

Other certificates including the domain name vacmed.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.vacmed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314469421012105412943755066639016752818096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 11:00:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 11:00:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vacmed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 982116201307076572455385521207072150684234942881927692685372899052786119305874539300383470461083489397512503721057942505125582995826633881898523074312821045026595204272448524628700834077837789054597064256283032529600225520522047746508965908139642867053257244645118518626113290121646921217482496318594548431792540199950991271768117956280270788707430835724741449310265927292965184425381929248445351284220295541918512907522387044371376571621592297192537891409077483538777505236439153362479288132130650074281036232284689406243323125135913202831982973825059633687080097590093536533139250314745742857916365692231578765968399403432098547182373492374564562780623027418046331556130133522550074674525666058145136771403355405156332402690728440827624850376654157480923359430251891350633447954692659813043101023019785133709715550633465472136227732146398203938556864751486542000821803121391126896285670278343777862746354215285368428006309214008348001933593610644860071210990402150592058938391448238451995779292923290578993059861464980607081107834163788894953497963184251565835913088359101279946611192162804543515113994662181021008799645002960384945866391571602163286864421679711541093829640557170228284291913969864369154511488494843087304988994323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9002de46b548f53fdd3f5b6aebf0620b393da7c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacmed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbfd760f700000403004730450220506e6142a61780f031d7da18df423cead77b04e3da10149bc5395b78109108f1022100a1537ba31b42a8aac51cb71d9c7162fa11d2cd99565d065cd3493e1cffae7e87007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbfd761e600000403004730450221008d6987f485b1316d00df6ad8b812a29ecea3e260227f96dc7b2e959004b350ca02202b1797b1308a42defea68478dc418576725e1fd16f0e21fe461406e06dabcdaf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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