sanleandroca.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:41:8d:88:3c:a0:38:e5:2a:37:5c:54:63:c3:c4:0f:fe was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanleandroca.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:41:8d:88:3c:a0:38:e5:2a:37:5c:54:63:c3:c4:0f:fe
Serial Number (int): 308042676760243364607889418511721395654654
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:07:ee:b6:a4:36:1f:f4:0c:05:f1:51:3b:4f:29:59:3d:e3:c4:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:6e:eb:e7:0a:f5:13:7c:d4:55:07:78:09:bf:29:09:a7:79:8b:1d
Fingerprint (sha256): b6:6c:09:69:d8:7e:31:1d:62:39:1b:ff:a6:8a:1f:eb:de:5a:24:f7:01:4d:7e:1f:01:61:d1:71:e7:ab:5a:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sanleandroca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanleandroca.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanleandroca.com

Other certificates including the domain name sanleandroca.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sanleandroca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308042676760243364607889418511721395654654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 02:28:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 02:28:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanleandroca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 926803668893462590339386361440120326371550274868975818665308058211948398237216906998236247185873923623652595148441966400397688913825169499978335525830953486603843191514233562608829607986100114060020285405548100288854245928757903591028917146364218789694150881104195262916802943169192965561355548234642946884619301671684958072194868815751834599143614651435853042226499510564377818608558341546074902661483982832193019466123713908141164083404852597879228282164021332784109932849620081446355551598945551198059605109591257089540875747159194221599707663142699732079282034325897134420041119656279014266496043355212624106527242946350521728816421171417466148327506210555987414156546665126600615029122470528145513034800535148404470404058175470420915124897053798784669076236594890780074616474502159596082155134270399222997847500291660699586991404815874461508906297061368349555526017655762545934759078830255881509943894482547883449118181790692836506895137278380691536986805418365243271261531412175602416743358446654731866175222015771730129125419472980993720484548562341006514127580830944153273756478921359403179942258590105776454962828346917486209376034693040022088224613619999696055158675753919911235364881875338858760805991011923981361948098381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5107eeb6a4361ff40c05f1513b4f29593de3c4cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanleandroca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f83322720000004030046304402202d15e0ac213012dc694201f093d988d521fa725fabca29c51aceeb0b6ba2fe740220713d315d35b39138d8139e73512ba5f19bf60438e320d6bd26bc6d4b58bfd400007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f83322714000004030046304402207e34b51ded5259870da57c8f4cd5f7b56ed7e5d16b18c68f439a12943f6547a202203bda6d18c8f23903f2ced96f8aa62c8195425c60c7e92572ece6e54f18c0fbc4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c2016990e2e59e44a1708257d62ff6115d3e211486b63f5706c6f1f7b72a5a6d5321e70eef1279df6b0088a748334cbab163545b50cefe6c03dd18ca261be6d35c1d23d03582e7b8a173ed21245661266fe30ba0d221152f6e37f0f3c165d868c0f33c61a0abaf6d65f9defb13ed6f3b8096480c454a32d7ff7b8d3efa237f247f036c01798c55fb1696b0f711523e86c735733c1308eeb7833098b421772087cfc3e7e695f95325d99a04c70858d2fc861c434fc1ae1401ec1d90838132da656cad11a7e05b7c80a9dc051b17bd489db74ea4550ceb1b8e0140bf2d1aec4bc5af5e5d69b9e7916c9596e452fb2a0151efd2922517851c9f12463379245ad42