somersetretreats.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:f1:46:c9:85:10:b0:de:e3:aa:cd:93:4a:22:5d:3e:a8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=somersetretreats.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:f1:46:c9:85:10:b0:de:e3:aa:cd:93:4a:22:5d:3e:a8
Serial Number (int): 266081240060324043660248766606751372754600
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:e5:67:4b:79:38:35:c0:33:09:a0:ff:40:ad:39:e1:a7:5a:16:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:ef:bc:56:e2:28:33:f5:6a:db:b7:18:45:ad:5c:b1:08:89:aa:bb
Fingerprint (sha256): c7:c8:4d:b0:4a:bd:24:b8:5f:21:0c:95:ea:03:f9:32:7f:87:28:f0:6d:33:17:c1:a4:fd:c4:ee:54:16:6a:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate somersetretreats.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for somersetretreats.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

somersetretreats.com
www.somersetretreats.com

Other certificates including the domain name somersetretreats.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for somersetretreats.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266081240060324043660248766606751372754600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 09:14:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-17 09:14:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'somersetretreats.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811442726663303055829267326783695444822263899078653270662585454053339393323672529118351109145542654794132927655613490325318053074400211656494472478427249651112613096626148392587207983514597719732373731000602165957957921225285842049353719277675299766184584663919358501929599408259438973556388522650421757029311793568448207770760375630453644765402319680449605621563232894010676664132011895635177581241563553509858143583479080928493379076564761810470185023754252774995494907260237920527315036490019088251202443976299977669248126883426878760684552238924557332495146381476691625918904720310947379289543554705226769850634272634516172301584394472219244042225392789760357263465864272536435387030258368065080097169172663280090798858489881572556809600479090037538339216267334190451662861779078328799916826178055950585247451947762392054441919093304500950688616002716978160538085624325490179065870733495264664500188300105589677087176757674034718373186047432876598162464230967218221849258461781779078974884760625456264137597143842798885083503825757358190018871240069241770456981666341949291785635210217508055682879807519027408530288762096041751940600271726011877762658220999624801013084013048397167524695187191228892732226159741897172014190566431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1e5674b793835c03309a0ff40ad39e1a75a1618
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somersetretreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somersetretreats.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fb825d129000004030046304402200266f24b8e7312fed77633eaa25308ea87042f481625da5ffa7a9664279bdbbf0220456368138b05a35d3224625cb087ed944d424d7e1bffe8cb650890aea517961e00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fb825d151000004030048304602210089ab408f0e62ece5a4b3660b683fa93b8f348ab2d061675bdcdcb566f5dc870e022100ed18eaa7160dfb8e2433f4300460e132651186f9fe5d2d3803779604dc5d38fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001bea721edb4272f230e1785b29c41919685521628a5d4a57c2024ab6039e8a97d9185ed8aa34fb20ee53dee9b41065e6060f178cc985011c47e6780956a3f00f520df0590e64561c2c986f7e0b4986257e8161244c8dbdf750da253fd9aec1f9edf759a7f1863198ba794a344e9bb078f525a2710c9730540c506722367f5ca06eac80fd4b75b6ccea468159dc25f4cd3820fb1499f5ec0677c651ffa568290c20313755b3fd260e762eaeac0092964747982ff5504da043fe65bea12f783ca10140b78bd8d193987ace89215aa3df5470fe1ec72ac91ddaf4753d1e824c636cf0cdaa90f81f0f5d16e9720e75334ac2ae9e953f6a0d1b1d8ace303b88b31b9a