www.vault.company
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:35:43:4e:a2:59:4b:1e:e1:0d:b6:6f:9b:49:eb:1e:a3:4d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.vault.company
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:35:43:4e:a2:59:4b:1e:e1:0d:b6:6f:9b:49:eb:1e:a3:4dSerial Number (int): 279461289809787944545106869412751378129741
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e9:cd:9c:9a:a7:bd:c9:fe:ec:78:88:3a:06:19:eb:1e:32:e7:63:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 87:d4:89:78:61:11:d2:24:89:33:2b:f0:32:2e:27:d6:5c:91:10:62
Fingerprint (sha256): b2:6b:92:e8:8b:f3:63:f3:86:b4:50:f1:17:3d:0b:96:a2:d5:b4:10:31:f9:84:f0:bd:60:36:e6:b3:35:3e:81
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.vault.company
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.vault.company
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.vault.company
Other certificates including the domain name vault.company
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.vault.company in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgISAzVDTqJZSx7hDbZvm0nrHqNNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDIwNDAxMTRaFw0y MDA1MDIwNDAxMTRaMBwxGjAYBgNVBAMTEXd3dy52YXVsdC5jb21wYW55MIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs2HylSPK9NTlzKpwD5y62/xDmYN+ 97AhZ8JnIA9eMaVGXCUKZEIvJSRhS3NgfYBSUcS9O2RDeMjdsvbIimcNVmJKzzG8 XacIHRVCbZWtGYXGei3A8IRsu0YfEpRbAteCdCSjNS1Q9nIn+Z10W+njDgr6rlg0 z/HUHDgYkoUmTHaSBWzgrpx6BmHG2ttzoYy2pIL5l/9yMCfXWV5tsrdnPqmQIaAF 48+lwdpHcK4Dnw2b6ndo7AxIU3xcJM5nr9BdHh/BG/lSgK/Z6y9zlAwKtR7iaFnV 64XpberZ2SnFbLo+/n0S5p+A/cTayiGKfuD2Mq2nsugUEjIqCyT+0knw09aUD5tt Vf3NkwnNxeR3D9z6J3b7gdVaieWJmrXEbTy9tfSMt3ZpT0zNGv5jma9BxKSIxh0L 9+gk1iFuKeEtzcOAJYnH7F7eo7wJR8Me0q2UEA6tx7fykerUwJqcKOpML2e5uC11 2obXusdOkd+j/DbVmNHFf6e2sisbBeBW/CbIxPF6gga3ddVmdgyAJwzxBtMJVDvJ dVPKFR4LqDGpB+Ixw3fQ9DaQJW5tPGiOJm82SUn7RJWdyqs57xQQBi3mDxMbJaYd OpnM8adWqxqDDJ9YpREsFS0DhWnGwPaaGtTPujYb7Ns6j8YgnWjuw8cPA8EZPviK 0soB2M5h5cbynpUCAwEAAaOCAmYwggJiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU 6c2cmqe9yf7seIg6BhnrHjLnY3kwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghF3d3cudmF1bHQuY29t cGFueTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC BAIEgfUEgfIA8AB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAAB cARGMdkAAAQDAEcwRQIhAPJNYElqu0a1cQqpC/gSAtcJqGMKA6bpGx5gKDEjcfLl AiA+/x89OqQ7OKEKkfCUlS+0gyNyH73Q7rErxChoYj5DJwB2ALIeBcyLos2KIE6H ZvkruYolIGdr2vpw57JJUy3vi5BeAAABcARGMcgAAAQDAEcwRQIhAKQrvjb/FHF3 lLEKzkjWzfuWj/k74bdNq6r8B/+dxW3ZAiBhLfigdBUp6LE01FupKS2okaTZstsb THMFXd5658YoXzANBgkqhkiG9w0BAQsFAAOCAQEAPKhM6IGf8Z85ZuxTbMjH4K99 Rf1NsPMn1UV8UGrUEjypiG0nd9HJE9LRSqlWDfsRr8ea8WFKTNERfrQwAdxewh4J RcNdt2YiAgQiZR6l208lEOR93fFw+2U3PCbp+0eK51JUIlFaIZ4D7YrMemGkQQFh D/oLrPbg8i5quzBH+pyr2siMxO0qg5qCwNz1xoX/qeeZuoDfvScJfTD9D9lQO4tE SV15HyLoQiuobo1Q28jenEswWIFUxQRHa7/ZC2/oqNw195eciGw+ZQ1ZRKeXOJB5 le5ETLQyoxjl4Bqfkzwoce+WbM1+2pdG7OGwYFPZEZnTosi2K21uze/GJD/LNg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs2HylSPK9NTlzKpwD5y6 2/xDmYN+97AhZ8JnIA9eMaVGXCUKZEIvJSRhS3NgfYBSUcS9O2RDeMjdsvbIimcN VmJKzzG8XacIHRVCbZWtGYXGei3A8IRsu0YfEpRbAteCdCSjNS1Q9nIn+Z10W+nj Dgr6rlg0z/HUHDgYkoUmTHaSBWzgrpx6BmHG2ttzoYy2pIL5l/9yMCfXWV5tsrdn PqmQIaAF48+lwdpHcK4Dnw2b6ndo7AxIU3xcJM5nr9BdHh/BG/lSgK/Z6y9zlAwK tR7iaFnV64XpberZ2SnFbLo+/n0S5p+A/cTayiGKfuD2Mq2nsugUEjIqCyT+0knw 09aUD5ttVf3NkwnNxeR3D9z6J3b7gdVaieWJmrXEbTy9tfSMt3ZpT0zNGv5jma9B xKSIxh0L9+gk1iFuKeEtzcOAJYnH7F7eo7wJR8Me0q2UEA6tx7fykerUwJqcKOpM L2e5uC112obXusdOkd+j/DbVmNHFf6e2sisbBeBW/CbIxPF6gga3ddVmdgyAJwzx BtMJVDvJdVPKFR4LqDGpB+Ixw3fQ9DaQJW5tPGiOJm82SUn7RJWdyqs57xQQBi3m DxMbJaYdOpnM8adWqxqDDJ9YpREsFS0DhWnGwPaaGtTPujYb7Ns6j8YgnWjuw8cP A8EZPviK0soB2M5h5cbynpUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279461289809787944545106869412751378129741 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 04:01:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 04:01:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vault.company' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731817191680088663042426937472585912238553830837771755987519245693261417601629012727300771967977998541009504210304679916775681561434653827135390872197654671658098564038140373229553291407623763478034954469527341604256375794013310091686360437395017665581392759842587670843311298682700356660960664705714497125233385826229484212799428215591974564929336289049597832318569991986628587070957254376154317584754447138731967761496225544330514581954716067699434045151769944363474090081730574981089054590351571594872100512804121716389467042734927036525488082742343975254064821131391955170329765705693218642924542718036252916451534328954462000540118152930418671310024205586324795513488170321076457722895332482576165480677909901648601695360690618818128157278404924224161886939816577460251628306780595164804893275785720258018796288677459977394783989560369108866327111824004583726177768317898856384876874449586084605089343688395427748009582830282476000015400840280042449416509829332582610150582331633750821040394253592172822722877177433348548156711697106637519863488274101785524266445642369878452558591879566125646942743900304959480589993575188292255770371555214995784681630684690699935430138938779309293569407774316637611063350877756802621030702741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e9cd9c9aa7bdc9feec78883a0619eb1e32e76379 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vault.company' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170044631d90000040300473045022100f24d60496abb46b5710aa90bf81202d709a8630a03a6e91b1e6028312371f2e502203eff1f3d3aa43b38a10a91f094952fb48323721fbdd0eeb12bc42868623e4327007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170044631c80000040300473045022100a42bbe36ff14717794b10ace48d6cdfb968ff93be1b74dabaafc07ff9dc56dd90220612df8a0741529e8b134d45ba9292da891a4d9b2db1b4c73055dde7ae7c6285f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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