2s.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:b2:f4:fb:f2:27:b2:ef:8a:99:36:6c:2d:dd:66:1c:bc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2s.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:b2:f4:fb:f2:27:b2:ef:8a:99:36:6c:2d:dd:66:1c:bc
Serial Number (int): 320783864253277542186219569487128872492220
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:38:7a:40:b3:99:78:3d:79:8f:1d:93:22:fe:76:c0:ea:80:cf:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 46:b2:29:0c:1b:a0:93:7c:28:3a:0d:73:3e:f0:b0:b1:e8:39:5e:04
Fingerprint (sha256): af:6f:64:27:2b:36:92:37:db:d7:91:69:fc:64:31:ef:ba:68:c5:46:67:a5:5e:45:49:24:c0:65:26:85:82:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 2s.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2s.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2s.org

Other certificates including the domain name 2s.org

(limited to 100 certificates)
2s.org
2s.org
2s.org
www.2s.org
2s.org
2s.org
www.2s.org
2s.org
www.2s.org
www.2s.org
2s.org
www.2s.org
2s.org
2s.org
www.2s.org

Certificate

The complete raw certificate details for 2s.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz3QKSTfgq0BW9SAsETi5
EvibgFNCg2KwGdykdDor9z0KOIv01yo1/vJMGP4iRepo1FqfAxC9eMCaOyrSOrf6
w6fVGWVWMJOQO9DTQWJFybztl2RbUYB+FoZ84h7IdIJBlJJSpeUzEquY1K8UJxsn
D78xbajd0W4cP6XHPe0I1wNGvfCWHG4yyrTmibx9ax/CkUkXqSR+hAWq+XnFXOIu
Cesmm0QKyo1kWQ/2Zzgye1yCXwZ7okAJh+kKxFh7oFHa9dTdSUWd7GKS3Vh8DuKc
i1HTnzj1eFZy/0GbILckFjI49+PkDD9vwa06JpypL5LZt2Yscu8TibdSVR1Ga8Jj
i3S9k8CUtFfV69V6KBbvstPSXTtDjVa24xFtFWpCPhhktJVBVFHU0EvwwvOJNTHP
KLSmvZRR110AyH0t4wlFbbWXiHePfKWYaSUtxMbd81wbhSupfohps7sGgv6i6Npj
ZFaHfC7i6sluWQLB1aiKDkulsa4Vm0psatqbxIFTTfgHfDql6KPtCrL4aXzaiDYP
o4QXlwAL8PGgZucbr8QuRKO7VTrPu2wj4c0kVu3sjw84+P+bLhknm6eARBoClovn
zAhtLCoGfa95CPdCvecUH8JmFYFI7DJ+d5zMCFtME7L0Yf7xZGlUT8pZEAoaEOSH
8TWL78qBkYmWlcGWisvtoP0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320783864253277542186219569487128872492220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 04:34:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 04:34:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2s.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846335551106945688541067585322703734686417693732040424223360814000108365112255063624169470704902220965448656291350195604595149031458374602327963780336042751222144482835748856529423465643835592625092296948747589307278626015658326541096880126220560781373176114421372164442189543236218035139049345106663458217742918376336004480159730732194045374028672555663679802572621126174471411458228597989569477793198279648446016104796069776044719479560490685631274888991463825148037683103680628543609786365283093127979364730415138766621665738166907181419625617898179801623039514850543026752250746494574124745681332910715569749391356800863215114382302603456379602074674180753866537546875776823347123859792634091523541311478401400898863331376708307612195190106847724669875490737947106495493908415227461405431332840638399188395783224722143167482957535755915110702560680356555425147478658732619401888988800360596151174223175498952289007794953747732555045257409711605813647417420564588214151265026829232239457276501641892339844049963663156946164916411491812071720726184054443453678550265819982272103622335806774011678133417638836207374538893714208878165846500752941948100471920156618386510008325987996369165962341482068356784418768457854877612314042621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76387a40b399783d798f1d9322fe76c0ea80cf41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2s.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016db42908e30000040300473045022036c2d9fd742278922018da724dcc729e9ec7720c0b15db204caf093c08d56e0a022100d85a26b9fe439bcb85e13ab8651c6b49cd8ada09c6b0fa99279bb050762e5beb0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016db4290918000004030048304602210080f06ac3ea8f63b9ede8dee0cda3fe6ed1843c4c3bff5821e817e5c625d80dfe022100a353e57b5190a2827749ef0c3540602dca255b0e5d47d9ada75bcaea6db9621d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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