trustmark.brafton-subdomains.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:c8:87:cd:d0:8c:c8:01:f2:76:7e:37:ad:56:b3:9a:78 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trustmark.brafton-subdomains.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:c8:87:cd:d0:8c:c8:01:f2:76:7e:37:ad:56:b3:9a:78
Serial Number (int): 292909386285656960202106122656349762591352
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:f9:4c:f4:77:35:a3:12:31:a3:de:e6:86:64:99:ee:8c:a2:f6:35
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d6:f2:3e:4b:fd:8a:60:39:43:79:1f:d2:38:9d:e5:fb:12:19:0f:c6
Fingerprint (sha256): af:3c:bf:53:74:8f:93:c3:79:6d:45:09:e6:b0:96:e7:db:80:70:f7:b4:bd:8c:93:7b:3b:7a:02:85:29:12:55

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate trustmark.brafton-subdomains.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trustmark.brafton-subdomains.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aurora.castleford.brafton-subdomains.com
blog-capecu-com-au.brafton-subdomains.com
blog.capecu.com.au
canvis.brafton-subdomains.com
capecu.castleford.brafton-subdomains.com
columbiabankonline.brafton-subdomains.com
gapsdiet.brafton-subdomains.com
mariposa.brafton-subdomains.com
pfasi.brafton-subdomains.com
trinasolar.brafton-subdomains.com
trustmark.brafton-subdomains.com
vts.brafton-subdomains.com
www.aurora.castleford.brafton-subdomains.com
www.blog-capecu-com-au.brafton-subdomains.com
www.canvis.brafton-subdomains.com
www.capecu.castleford.brafton-subdomains.com
www.columbiabankonline.brafton-subdomains.com
www.gapsdiet.brafton-subdomains.com
www.mariposa.brafton-subdomains.com
www.pfasi.brafton-subdomains.com
www.trinasolar.brafton-subdomains.com
www.trustmark.brafton-subdomains.com
www.vts.brafton-subdomains.com

Other certificates including the domain name brafton-subdomains.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for trustmark.brafton-subdomains.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxciQPU/qxaSUYxexH8u
QNuK7o4rfdV+kGUePxcr5tQt+Jp8gMhV+8K8kQTtqNtlrSfJzcGZ73UKC1SKpx1B
HjlOobM//YDTf7egPaLktdHz/IPZINAvHQEIIOfFkGeumZZtT1dakbvvNkGHtdDT
JCR0D4BE/CnUSxCZUA8ZWtQjNTFlwLsR1PoAJ0+wPg6sw4X1Cnh23rMsfW4ArFZv
86NEkF42WTkqW1bef4BI6zRay/0Jn5ZnofWPrHUg11HJHzYvB5mYMBGT8uAqOlqE
7hF+2GmFjOiXzzuzyi3iwXUMMO2iTDsV/g8c1V9e1DYokI7weWlMgXGPe/rPq4xB
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292909386285656960202106122656349762591352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-06 12:30:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 12:30:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trustmark.brafton-subdomains.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25132830392011443484725514068751999888779042244324025874801578571474450390817570764594795774339580915945796191704282117782162537195705189148027580254273258396461171330318417487084383589579342370784101054357908905525730981727529250920103368920619273361039400881944711289220277311221065068022907975052894251704849208499370172464259669342605710913109056862896286361425604478432046143301823842016480333591807060012205613358770613725206488690337386115087533235461674554730720127239220711882414865457529808371860990369372212007893461891547943661735489499508328312917262754405588243463428187532774860881986639483798945546717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ff94cf47735a31231a3dee6866499ee8ca2f635
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (856 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora.castleford.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog-capecu-com-au.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.capecu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvis.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capecu.castleford.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiabankonline.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapsdiet.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariposa.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfasi.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinasolar.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustmark.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vts.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurora.castleford.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blog-capecu-com-au.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canvis.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capecu.castleford.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiabankonline.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gapsdiet.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariposa.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfasi.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinasolar.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trustmark.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vts.brafton-subdomains.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168235b22e2000004030047304502202cb22fddab5c555ada2426f8a1f805139dd91e8b6e7db5fb2c95cee0276e1d6a022100eb3ebb46562ffb2a7674278dd03b61e730a8b2819b1196639b88fc7b48a80a1300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168235b22df000004030047304502210091d10fdd8ec97dc29d2f246df2a091bfe47e94647f655564b17fd03ad6fb091602202f9d65ffaa1b46dba1710fafc302eabca7cf8c098e1b43ad1a2443304f98692f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00672fd761c995417a9c438e53771ecaf63efc97228d0e3a7376c88c13b0d663ad8e89b1f342e995f86a87b5f702823cb10617709efe6a14c58373f8af67732289b8fce1ec85595a4010ef5f59077067c7a6fc1400e984fadb6cd07e7988d89e784801c31aa1baf8a904eb382afdbb3313a09bc2d540926f1655913663d4eec0008a1bd34027f7b7d5fc8bfff1ef96f2aaef6154e92065d4a97792a5a076e56781f33d67b27b55f6ee55467efb274ce67c51c146794e2c788c2f1a0d52b32f984761f68428710c4d47ebb0f9b0d29de04a0d67de1634769059ec96932b6fcae675d31fa2f960d8be97b661d9192c1ee04c6eaad4b494527b8a60dedcb797833b69