www.ranchosandiego.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:24:a2:6d:b2:3b:5b:68:60:e4:f2:9b:19:45:cb:85:2a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ranchosandiego.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:24:a2:6d:b2:3b:5b:68:60:e4:f2:9b:19:45:cb:85:2a
Serial Number (int): 317191861555157617407679164781631350998314
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:4b:f3:6f:3d:75:30:71:26:2c:5b:c0:91:4d:71:6b:68:8f:b8:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:42:23:d6:5a:3a:bc:56:5a:9b:09:a8:61:00:87:38:93:bb:1b:11
Fingerprint (sha256): ad:4e:71:8e:fe:f0:c7:a2:ef:ec:27:1d:13:0c:43:d9:d5:91:da:97:93:db:0c:f0:1e:32:96:8d:82:e2:6a:8b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ranchosandiego.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ranchosandiego.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ranchosandiego.org

Other certificates including the domain name ranchosandiego.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ranchosandiego.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317191861555157617407679164781631350998314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 05:36:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 05:36:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ranchosandiego.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775014362393454432028689764923981273604920521414059953873278089208349547116214760067886879275347693493051065901105135838191468465931455509796661710583812936919001596946057135090710468691418046148999204597714404548767349094884731288373262675587093812233994836971122479921044607937571636722716510236235070541103244427164641235858655790050403698003852938842218031501309121307191498760072142728949532133911601450395686397307828169736667790484889288767012901675607367176884574922141443192674641260126682351699123320489750098604053461150974863832983130140765272062226076027698880838509191511029668732500469121316628091473282125505702904549695420749962089713458604974265438429725568081439266496495625591189882946591554109903148428482421858866353014898767305600104991184829067288411329747823370775652178602368172059261571768967238078322622135453144509245918769048630807700839681955520854823258661158840497574957355014879084623687615823855596897347703250385352257291076467990600662974674642086313582383559003909328739041178002526120217584129630459580154634266559660724723757457776379440861493019928033670952380605659204611210924907955734834719285309486403387795430749440742272000928031932656184290074304704948810194310354052833056912457750693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							764bf36f3d753071262c5bc0914d716b688fb89f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchosandiego.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbeaea4b300000403004730450221009774c40650a853bbb13b7a326aa8f654f4edbed390cd4ec386baabf7da51443d02201886c7ec3d4913cbba25fefbca139900e241c8ddfb4a8bbc2de957add15601500075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbeaea687000004030046304402203e76857f21b1fddda2bf0a94e747ec9b7cf459347dfd2cb1795d3c41a27f932c022002bca25c697a8035f1c5f8620279440386c6c1e79be1ad67d515279e0e105df1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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