www.swanson.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b3:8f:5a:d8:9d:e7:84:a6:d7:1c:c1:3b:14:f6:00:fa:bc was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.swanson.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b3:8f:5a:d8:9d:e7:84:a6:d7:1c:c1:3b:14:f6:00:fa:bcSerial Number (int): 322437952777754183310985755943366817807036
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 61:3c:12:dd:3b:fb:83:c5:db:1c:ae:d8:fe:98:4e:16:37:4b:21:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 92:8b:5b:d1:33:05:31:10:67:54:45:20:30:a9:c2:09:d6:0d:6d:9d
Fingerprint (sha256): c1:1d:2e:5d:ef:d7:2b:bd:65:36:81:b2:a7:c6:8f:1c:49:a7:6a:37:ec:0c:ad:5f:1f:50:01:ec:f0:20:d1:be
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.swanson.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.swanson.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.swanson.com
Other certificates including the domain name swanson.com
(limited to 100 certificates)
swanson.com
www.swanson.com
swanson.com
www.swanson.com
swanson.com
mi.swanson.com
swanson.com
swanson.com
swanson.com
medialibrary.swanson.com
www.swanson.com
www.swanson.com
www.swanson.com
www.swanson.com
swanson.com
www.swanson.com
swanson.com
www.swanson.com
swanson.com
www.swanson.com
www.swanson.com
www.swanson.com
swanson.com
www.swanson.com
swanson.com
swanson.com
swanson.com
swanson.com
www.swanson.com
swanson.com
www.swanson.com
swanson.com
mi.swanson.com
swanson.com
swanson.com
swanson.com
medialibrary.swanson.com
www.swanson.com
www.swanson.com
www.swanson.com
www.swanson.com
swanson.com
www.swanson.com
swanson.com
www.swanson.com
swanson.com
www.swanson.com
www.swanson.com
www.swanson.com
swanson.com
www.swanson.com
swanson.com
swanson.com
swanson.com
swanson.com
Certificate
The complete raw certificate details for www.swanson.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgISA7OPWtid54Sm1xzBOxT2APq8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MDMxNDEwMDZaFw0x OTEwMDExNDEwMDZaMBoxGDAWBgNVBAMTD3d3dy5zd2Fuc29uLmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ3FPXfNogd8+0cP/QyZdZbyxJnRnWu/ bffj97GDTpxBZ1+T3hG8mCQjMQiNJbEUpUsey9mAhz6AuG9umf5frALRG/ms8rAf EVc4rsOE2t/c1GMMdlg2BkDw3nQ8ZaLfRgtfXQIvlLTfZ1BvVkU21Y7wPurl5fmF 6xaZ5Kr1yockT2w3b3vE1nPukWKOP8gP2KLKL/INkMo0DSqEYol1X2LgSixJSAnC q80ofGs0jYXqhjhFU8btknU67xP3mplcqGOFTJPKySnWoXdcLs7mhyO522mHTFrw r0IUolpry2ke7PM3zeA5tlMY4ioKAgk05on5ciDoYeZM0uXedXQ84YneFtO48iox 9Ujaz34hwJCif2eGO91i3sI4dyju2BAEPkEkJxnp1cXyoj+AXnZ0lzRby6k1z3Q0 tyqq+F+i6Kplrphew8WyQPeG4SxqRwxYeTcALnOgw9dBdkKjOqBEd7knXT1f0C78 2H6bHaor6ArNC3+NdItGx+N706jFCWNZ9Xu//fZp3r7DFZkGvAx5JIYyHF8na5SS 3YHrtdvprW9Qovraj8CF3uwZh3kuwtFQ2PfzO1QsVz8mFlku1b8E8JXDwYcD5Zma PU3YO6V9cBPmFfoWYnqieXLMU3eMtXdPCqTF7M3wafqhYGX9W9AKmeVMqrtOC8iV 2Yu4mgugNapNAgMBAAGjggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGE8 Et07+4PF2xyu2P6YThY3SyESMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LnN3YW5zb24uY29t MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFruGK5 dQAABAMARjBEAiBXIjsGNoFZ/Ovv47oBb/LPkHaZLhqpbwmFZxx4haacNQIgJTJs D8h2ycO6efp+GUrLDy37EIQZ4Zz+WaJJqdCHlZwAdgApPFGWVMg5ZbqqUPxYB9S3 b79Yeily3KTDDPTlRUf0eAAAAWu4YrlCAAAEAwBHMEUCIDxw7GsAEkMBqh4T7ep3 dxIEFXil/4xa2Iz2DbxUuwD0AiEA/Vxa9AN/Y66N56WN9wQHVhQQeOuPqIhAGsh7 mbqssWEwDQYJKoZIhvcNAQELBQADggEBABv4C2vuN98J5C7O9TL4Vmwj7NgVjnCR iw5jS/g48OOOISHhsTtRBbVOLc4FgSlo9oDQQTV9EICmkLwkniiHhZA1JJyFp0EB Rns2UTJCtiR6a+ON+eow2MaUDPlE5Tdv20KH5lctvz5VzUXmVSAl/EbsdXcUJx+V I4oP/t28VWp+3A3ESiz816lDrt9uYE5hFsj4U4uVK+8hbUPqDvnhdXIm5IXCNAhA UoUKIkNKF1Wq8AmAre0KWQKvEnsgaxwyfPbz2KUaVUz93vX5IVWsHKIyH6iZd5M5 /sf1qbnVpAG551YPj128+klflLyhTuLCfEmugU9zXTTXXSvWbrr7rJQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAncU9d82iB3z7Rw/9DJl1 lvLEmdGda79t9+P3sYNOnEFnX5PeEbyYJCMxCI0lsRSlSx7L2YCHPoC4b26Z/l+s AtEb+azysB8RVziuw4Ta39zUYwx2WDYGQPDedDxlot9GC19dAi+UtN9nUG9WRTbV jvA+6uXl+YXrFpnkqvXKhyRPbDdve8TWc+6RYo4/yA/Yosov8g2QyjQNKoRiiXVf YuBKLElICcKrzSh8azSNheqGOEVTxu2SdTrvE/eamVyoY4VMk8rJKdahd1wuzuaH I7nbaYdMWvCvQhSiWmvLaR7s8zfN4Dm2UxjiKgoCCTTmiflyIOhh5kzS5d51dDzh id4W07jyKjH1SNrPfiHAkKJ/Z4Y73WLewjh3KO7YEAQ+QSQnGenVxfKiP4BednSX NFvLqTXPdDS3Kqr4X6LoqmWumF7DxbJA94bhLGpHDFh5NwAuc6DD10F2QqM6oER3 uSddPV/QLvzYfpsdqivoCs0Lf410i0bH43vTqMUJY1n1e7/99mnevsMVmQa8DHkk hjIcXydrlJLdgeu12+mtb1Ci+tqPwIXe7BmHeS7C0VDY9/M7VCxXPyYWWS7VvwTw lcPBhwPlmZo9Tdg7pX1wE+YV+hZieqJ5csxTd4y1d08KpMXszfBp+qFgZf1b0AqZ 5Uyqu04LyJXZi7iaC6A1qk0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 322437952777754183310985755943366817807036 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 14:10:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 14:10:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.swanson.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643647358686550152960425831028389455246293179585377827508889091774684229226989892499400769502145965400396021423786374936184599555895218191008952931609719066881692746582294356729281619944536900221666574976656347032665391353015499098611052437590253724747276627551354272654885351546737002772370915489002833739964500813850867633658390486171967536484055630017923827583998037825501983350261050797501670733485012284605594193768183195890222287866514438253426122719108554657910551336146731206703261357234702317165770941111425816216260569135626210331719735514957045645516719724685700550168205055647549495140652263531700213812591388081344063693946607037488599629398478724865493200825143636547743985007311000254946286593770924719057964315974389706323230203257904074651619877375100333393063006506868498336469412737928022129934158482753826549962105313937250641004145541836859853139430720831992952751894723190290031349126731690074378435482872009228155261201848592770390006579766802987129526785116700544376305256164956742248523232123648731065414279195424740731366329551109455628193439168399187560032046239496029885658598962538105487083342447755182442753456042882068578770931200186330229630666599249483629977480634347932947373941352580606088703224397 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 613c12dd3bfb83c5db1caed8fe984e16374b2112 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swanson.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bb862b9750000040300463044022057223b06368159fcebefe3ba016ff2cf9076992e1aa96f0985671c7885a69c35022025326c0fc876c9c3ba79fa7e194acb0f2dfb108419e19cfe59a249a9d087959c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bb862b942000004030047304502203c70ec6b00124301aa1e13edea777712041578a5ff8c5ad88cf60dbc54bb00f4022100fd5c5af4037f63ae8de7a58df7040756141078eb8fa888401ac87b99baacb161 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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