www.swanson.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b3:8f:5a:d8:9d:e7:84:a6:d7:1c:c1:3b:14:f6:00:fa:bc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.swanson.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:8f:5a:d8:9d:e7:84:a6:d7:1c:c1:3b:14:f6:00:fa:bc
Serial Number (int): 322437952777754183310985755943366817807036
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:3c:12:dd:3b:fb:83:c5:db:1c:ae:d8:fe:98:4e:16:37:4b:21:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:8b:5b:d1:33:05:31:10:67:54:45:20:30:a9:c2:09:d6:0d:6d:9d
Fingerprint (sha256): c1:1d:2e:5d:ef:d7:2b:bd:65:36:81:b2:a7:c6:8f:1c:49:a7:6a:37:ec:0c:ad:5f:1f:50:01:ec:f0:20:d1:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.swanson.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.swanson.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.swanson.com

Other certificates including the domain name swanson.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.swanson.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAncU9d82iB3z7Rw/9DJl1
lvLEmdGda79t9+P3sYNOnEFnX5PeEbyYJCMxCI0lsRSlSx7L2YCHPoC4b26Z/l+s
AtEb+azysB8RVziuw4Ta39zUYwx2WDYGQPDedDxlot9GC19dAi+UtN9nUG9WRTbV
jvA+6uXl+YXrFpnkqvXKhyRPbDdve8TWc+6RYo4/yA/Yosov8g2QyjQNKoRiiXVf
YuBKLElICcKrzSh8azSNheqGOEVTxu2SdTrvE/eamVyoY4VMk8rJKdahd1wuzuaH
I7nbaYdMWvCvQhSiWmvLaR7s8zfN4Dm2UxjiKgoCCTTmiflyIOhh5kzS5d51dDzh
id4W07jyKjH1SNrPfiHAkKJ/Z4Y73WLewjh3KO7YEAQ+QSQnGenVxfKiP4BednSX
NFvLqTXPdDS3Kqr4X6LoqmWumF7DxbJA94bhLGpHDFh5NwAuc6DD10F2QqM6oER3
uSddPV/QLvzYfpsdqivoCs0Lf410i0bH43vTqMUJY1n1e7/99mnevsMVmQa8DHkk
hjIcXydrlJLdgeu12+mtb1Ci+tqPwIXe7BmHeS7C0VDY9/M7VCxXPyYWWS7VvwTw
lcPBhwPlmZo9Tdg7pX1wE+YV+hZieqJ5csxTd4y1d08KpMXszfBp+qFgZf1b0AqZ
5Uyqu04LyJXZi7iaC6A1qk0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322437952777754183310985755943366817807036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 14:10:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 14:10:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.swanson.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643647358686550152960425831028389455246293179585377827508889091774684229226989892499400769502145965400396021423786374936184599555895218191008952931609719066881692746582294356729281619944536900221666574976656347032665391353015499098611052437590253724747276627551354272654885351546737002772370915489002833739964500813850867633658390486171967536484055630017923827583998037825501983350261050797501670733485012284605594193768183195890222287866514438253426122719108554657910551336146731206703261357234702317165770941111425816216260569135626210331719735514957045645516719724685700550168205055647549495140652263531700213812591388081344063693946607037488599629398478724865493200825143636547743985007311000254946286593770924719057964315974389706323230203257904074651619877375100333393063006506868498336469412737928022129934158482753826549962105313937250641004145541836859853139430720831992952751894723190290031349126731690074378435482872009228155261201848592770390006579766802987129526785116700544376305256164956742248523232123648731065414279195424740731366329551109455628193439168399187560032046239496029885658598962538105487083342447755182442753456042882068578770931200186330229630666599249483629977480634347932947373941352580606088703224397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							613c12dd3bfb83c5db1caed8fe984e16374b2112
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swanson.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bb862b9750000040300463044022057223b06368159fcebefe3ba016ff2cf9076992e1aa96f0985671c7885a69c35022025326c0fc876c9c3ba79fa7e194acb0f2dfb108419e19cfe59a249a9d087959c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bb862b942000004030047304502203c70ec6b00124301aa1e13edea777712041578a5ff8c5ad88cf60dbc54bb00f4022100fd5c5af4037f63ae8de7a58df7040756141078eb8fa888401ac87b99baacb161
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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