lona.boston

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:91:b1:d9:43:46:40:84:ba:79:af:24:96:54:eb:47:4c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lona.boston

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:91:b1:d9:43:46:40:84:ba:79:af:24:96:54:eb:47:4c
Serial Number (int): 292155932320710887947237095608177683810124
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:0a:20:43:98:a6:d7:fc:ee:af:f3:cb:a6:37:4a:53:75:06:dd:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:a4:b3:57:1d:dc:4a:5c:ca:04:93:de:cd:7f:f1:53:4f:d4:43:44
Fingerprint (sha256): c1:bb:52:a7:7c:33:53:78:a2:ad:bf:e2:6a:65:89:c7:d0:43:fc:10:09:0e:04:4a:67:1a:5f:31:8e:dc:6a:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lona.boston

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lona.boston

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lona.boston

Other certificates including the domain name lona.boston

(limited to 100 certificates)
lona.boston
www.lona.boston
www.lona.boston
www.lona.boston
lona.boston
lona.boston
lona.boston
lona.boston
www.jeanna.boston
www.jena.boston
lona.boston
www.lona.boston
www.lona.boston
lona.boston

Certificate

The complete raw certificate details for lona.boston in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISA1qRsdlDRkCEunmvJJZU60dMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjkyMzM0NDVaFw0y
MDAxMjcyMzM0NDVaMBYxFDASBgNVBAMTC2xvbmEuYm9zdG9uMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAw2J9nfn9t9D1/xEPibDzfkRLg1x3jlwwqs/4
QiiPf4KTX2FcpqpP0QUmEKWDcDB78eadzXyV0Yzj21O7hr6YYl/VvxhvEokBZ8Dl
OveM7KbJGXyeLDtegQICXVs8zgaOlz6gGYs0S3u5VMl79hdYopCWIo9ATIgv8PKu
7zZ988R5TqdGGMDfDt6YHFZ9i+nQoYXALRN54jCmR//c+FZVXXytsXTsmJHBfUjc
uHCQ28KOHgR/R0lez8KsmfayvFb2Ooyc4WAOxblu6ODZOuqCTZyTkNMbjLY3bVjv
TX6EaGcRB1+F5yWQmRTxh1zFaXKDr11Z9FY/tWigWCx7lW78hICQO9mwkSGIiDeT
1y+76lTE/ocHfGFkxDg270Say1MpHrZ8hH9vCVJ1aRcqDBLWgRBf7ewxWDPyFtZt
6U/Hu6YrEnDJSwmBaIQ5kQUC4/BYezif5YgoTp7BDYf4T0ClHcAXHO0TfzZqEeyV
EJFYjvzxkk2lkfWsB7o5QjA2l+leixTc/M9NlQ0+NJ/chQLOuT930F8mffdFuWvb
fWK7rnJdIdiUflxTzkZrbF0n6/ep/tqVzcST4K6U/c8yQIEMZnDwUhZXyREpPAcF
L1WPKAmrRCj38asIaQL8ArGE+UB2xaYpMF07FVQMkufYqJ5gkJRuvK+fvo0uiEV6
UtMdTa0CAwEAAaOCAl8wggJbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUuQogQ5im
1/zur/PLpjdKU3UG3YgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtsb25hLmJvc3RvbjBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1
AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbhoWFgMAAAQDAEYw
RAIge+pvJk8/irA0CzrNmScOIQrUYOueOobuX/5PP+W3zAcCIAdMZnDwsX5abbhX
IoqsB6C93NfZxKlNRy8owRepB5UwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn
sklTLe+LkF4AAAFuGhYV+gAABAMARzBFAiEAhhvFoyQEB6mG9aMcY8HxgT4i2AeJ
a25V5uJX0P88ysgCIEMbBjRJpdhsrgzRf6oisvMzSh371RQbmHWyWKkp2gMhMA0G
CSqGSIb3DQEBCwUAA4IBAQCJe7NQ5wgW91TA0s9EF7rPpeZLSNoNOujMQP1t/zER
fehiNpVGDlCVwJShl9z2EWfWTasjVngVMy4/6pwll0mHeO+KCnzHBUyAtauPwCYH
6MPynveqgF3enEweO/DXVHFIOqFoHCYeML1wvK3GjPMYD77hqUI4mXhnXpnCKtBk
djxxTU5zPdAyaX2ETN9W1DzH4CIkIuVHCzWDfnC/FJFQW1H4onqxYa9B05d51imL
M1qMlkyIRgCqDgeuy2gzAnxehScJV/GXS6+LJ2MgbekkqMfuub8pgQB9Oaxgxv2W
faaBfZ0FZeHfx+zY8isGAqyBB5c74aw1kSGWCvQtysfB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292155932320710887947237095608177683810124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 23:34:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 23:34:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lona.boston'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797100151726727758189087984874523166545412667562608918888778370597949833513298505476558321543384157116561013352489593926100200199463443762432286739740224442814080192775851562656867141221288734849346831919305537006954356621975394102695368204243623422359997760832097678126375639934956587934873834468703386438282307507418542780122354478941910037862728446113620747247482478512716077806125062242060507766347732095577173251033771043273071554158872395497039966460077379096132636264089260188111218866816416531563978021934402761670659964382972227905348452953488546468719739425095523023394656933623635503643102961288103453159246326806612841488808665030348576728845433591813514079664185833236798740755532974136674620234461359219645933874967789242022704732741260624924556483753501538231751769415050163438394587921946545507249995536593274957310981679465740837317268673046115736779338638863959862443531339353745223770315468901962413854946199378294820520369869541876598011223680170599204284513776746033364700523574152033936426394900567446386415057364394273588179627829578322978624886715453842633156005342579898707022263218213444138553235757728675812079336831418432192979154311207849143919480007815143208423412696368535182521878511584370367578066349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b90a204398a6d7fceeaff3cba6374a537506dd88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lona.boston'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e1a161603000004030046304402207bea6f264f3f8ab0340b3acd99270e210ad460eb9e3a86ee5ffe4f3fe5b7cc070220074c6670f0b17e5a6db857228aac07a0bddcd7d9c4a94d472f28c117a9079530007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e1a1615fa0000040300473045022100861bc5a3240407a986f5a31c63c1f1813e22d807896b6e55e6e257d0ff3ccac80220431b063449a5d86cae0cd17faa22b2f3334a1dfbd5141b9875b258a929da0321
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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