www.laureltreerecords.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:e4:34:a9:b5:aa:48:a1:13:55:4b:81:7c:a8:00:d9:c1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.laureltreerecords.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:e4:34:a9:b5:aa:48:a1:13:55:4b:81:7c:a8:00:d9:c1
Serial Number (int): 341946833813218042634487283151451268897217
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:b2:bd:32:62:63:99:26:56:6a:15:8c:e2:88:81:36:c0:dc:7a:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:88:f8:10:24:db:f9:6f:0c:b9:fe:17:1d:9e:3b:2d:75:74:c7:23
Fingerprint (sha256): c3:8f:d8:24:21:53:db:19:2f:9b:55:6a:d3:de:a5:a2:d8:47:af:1e:de:21:1b:b8:73:7c:25:e2:c2:73:33:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.laureltreerecords.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.laureltreerecords.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.laureltreerecords.com

Other certificates including the domain name laureltreerecords.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.laureltreerecords.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341946833813218042634487283151451268897217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-03 05:04:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 05:04:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.laureltreerecords.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817859860482159850846646994217629021558038286821944378957411430855663145786862840668990810190292038969670795410289927688309749896397137651406517750185479365313554545792668209086578257434720002478260093110661682264381229322710411857179266645111295157378528920892350718997335709389857405871803153504054537872190283798930184928533733528837456143001803354247769230456378447857756677662044938653677810404696494559948192632565143185498265037515414680930689678596626984769462579167718827878148976989367195592029895307772158232113114741168147445088830183764369432611071404150254053318708173357395967244936339903009973910356285323814600651453250146480900265080353637891352804289194542216386310144652898816241987258552669065181502334000355143913942179680220772297243708414986109657084776779111853396464131669058673133631378007432415593640387862071908966470291502660934477668223997123562764578006060031616630086102512003146850664394484274229736826784524758174010230752272841708792919328673297505934324066095105747369375073501242793216416119250031643109881820728752860002380407674091700486851313596690697282810423239874523148023398723686945238213175047278287104250024167509804307887875415625702065389791217999400253876238069180117592085802768933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55b2bd3262639926566a158ce2888136c0dc7a16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laureltreerecords.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c561442d20000040300473045022100fe5889e58d2766396937e099ee4e1edfb9f2cf935df0246f30a1c80d73c19adb022041bb3caf1cf26471e4377a29449eafe2b9cc3619a1c2f82809243ae14feba9bc007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c561442f30000040300483046022100d5479cbe4f25f1cc8ce3ac22116d483684ae400c1860f7154b2dd07dc6078b3e022100d3e69ac9889e6307800860abde9bde29c8d9eeee8b77c81373c80115e40c045f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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