danner.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:e4:31:97:03:0b:d3:40:d2:f0:ca:ef:d9:27:35:5d:1f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=danner.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:e4:31:97:03:0b:d3:40:d2:f0:ca:ef:d9:27:35:5d:1f
Serial Number (int): 334120323417910856046669978509322719943967
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:06:62:43:c5:50:06:03:cd:71:b4:59:2b:5e:0b:84:43:f6:20:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:ac:65:7e:6b:3d:63:81:8d:e9:55:9f:96:19:7b:95:29:40:46:14
Fingerprint (sha256): c2:db:93:24:9d:81:4d:47:3a:31:dc:77:0f:ab:dc:e9:ea:83:04:3b:a6:ec:c4:a1:ce:d2:3f:3a:f6:9a:91:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate danner.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for danner.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

danner.com
lacrossefootwear.com

Other certificates including the domain name danner.com

(limited to 100 certificates)
origin.global.danner.com
review.aafes.danner.com
blog.danner.com
review.aafes.danner.com
review.aafes.danner.com
www.danner.com
blog.danner.com
danner.com
support.lacrossefootwear.com
www.danner.com
review.danner.com
blog.danner.com
support.lacrossefootwear.com
dev.danner.com
danner.com
blog.danner.com
aafes.danner.com
support.danner.com
jp.danner.com
aafes.danner.com
mail.lacrossefootwear.com
review.aafes.danner.com
blog.danner.com
www.danner.com
www.danner.com
www.danner.com
mail.lacrossefootwear.com
dev.danner.com
review.aafes.danner.com
stores.danner.com
*.production.aws.danner.com
*.aws.danner.com
support.lacrossefootwear.com
stores.danner.com
www.danner.com
review.danner.com
review.danner.com
www.danner.com
blog.danner.com
dev.danner.com
blog.danner.com
review.aafes.danner.com
review.danner.com
www.danner.com
media.danner.com
review.danner.com
jp.danner.com
stores.danner.com
stores.danner.com
review.danner.com
blog.danner.com
danner.com
support.danner.com
review.danner.com
aafes.danner.com
review.danner.com
mail.lacrossefootwear.com
www.danner.com
aafes.danner.com
danner.com
aafes.danner.com
jp.danner.com
blog.danner.com
blog.danner.com
danner.com
aafes.danner.com
review.aafes.danner.com
stumptown.danner.com
jp.danner.com
www.danner.com
review.danner.com
m.danner.com
dealerservices.danner.com
jp.danner.com
aafes.danner.com
aafes.danner.com
dev.danner.com
mail.lacrossefootwear.com
danner.com
*.aws.danner.com
*.review.aws.danner.com
global.danner.com
aafes.danner.com
dealerservices.danner.com
www.danner.com
global.danner.com
*.production.aws.danner.com
analytics.danner.com
aafes.danner.com
aafes.danner.com
support.lacrossefootwear.com
review.aafes.danner.com
*.review.aws.danner.com
*.production.aws.danner.com
sni.cloudflaressl.com
dealerservices.danner.com
www.danner.com
aafes.danner.com
support.lacrossefootwear.com
danner.com

Certificate

The complete raw certificate details for danner.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSEp+4noOPbAFt5n0wOb
kuo2ZQ4HfvVDgAbRWJobEaxL78Ih8YqBFFGiW3H9dsCpKydcUJXTgr1fvgvGiQKW
QJmSpQMk+RRw5WqSL2/LRRpqrspp247YVd+nr7pGJTm+slhY0xRiZ4Sa8hsK0fty
VkAAvZ6slCnZqXhHjCYsYcM3B/onDWXSk8IhN/XGtj/rOf5GNpD1hbKCVE3taXPp
bHVgmQ1zVTmmsBD57DqEYaqDzF9CUld6K2NQ7M4D/b+hngjOoinjCGiVGsbHBPzK
zGjNae1GXey3tZwcX8QjE+kw/9wi2RvdVu5jrdbnfC20/SJ0ktRgEy9D/+6DyKv2
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334120323417910856046669978509322719943967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 23:03:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 23:03:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'danner.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20845674094564660754717146517560383186314082755155577760942003436710609402745154859098133807018220763075643422244027141889795764050518653152024187923636096189331219509862786249397481393795738224004065985304030221715320908028828913284314144914695525546629126637881849597781831988119798460190724934683791571496191550360994430846313419431081811542479539194887911417334995829124052182320222246928018938750261828434297398567075048679802300827095617172322908683685480806308285415983630731190917743944611067802352710358097979770911296558016125784786562590422357249065698455710350631300681458245248443153588375144312102188679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe066243c5500603cd71b4592b5e0b8443f620a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacrossefootwear.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016908375b6200000403004730450220513109429814e8f314d680a3e43066d9505ec7dc6a2e45ad37ebf3b00562c8cc022100b3ea4c7c0fb8746436ac6476a34a1c56389da9935178f16607498d910ac97bcb00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169083759d40000040300473045022100e60cbd9499875bf643eaec2d66e2e25295ab7b4c48e3c0a5183ea798a5d22a3502206c146d132b54cd5848601da1a9d2db2dc187e096a6165e15c76d00d655fe2d57
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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