stasgroup.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:69:3b:1e:d5:ef:a1:d1:48:8f:72:f3:82:d4:e5:c1:fe was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stasgroup.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:69:3b:1e:d5:ef:a1:d1:48:8f:72:f3:82:d4:e5:c1:fe
Serial Number (int): 299588358800919966837060410718034585829886
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:6b:fe:9f:f6:87:53:46:c3:7a:eb:5d:33:39:0f:f5:65:d6:ca:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:f0:d0:65:1b:af:75:f7:69:fe:37:77:a8:19:f5:70:15:9e:66:31
Fingerprint (sha256): cb:ce:3e:af:dc:31:77:5d:03:ed:57:10:56:ed:ac:4d:b6:da:60:c5:5b:8a:e9:cc:e3:02:0e:06:2c:6e:bc:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stasgroup.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stasgroup.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stasgroup.us
www.stasgroup.us

Other certificates including the domain name stasgroup.us

(limited to 100 certificates)
books.ctpl.in.net
apply.mytgroup.net
careers.maarutinc.com
jobs.greenpointcapital.com
books.bemenderfer.com
apply.mytgroup.net
books.bemenderfer.com
finanza.mzconsultants.eu
stasgroup.us
books.sidestreetmedia.cc
stasgroup.us
jobs.omniventuregroup.com
accounts.kalaakaar.in
clients.logoscorp.com
jobs.rockitdisti.com
books.bemenderfer.com
books.bemenderfer.com
careers.vendeur-afrique.com
books.bemenderfer.com
sistema.soluteclatam.com
books.focustenconsulting.com
books.bemenderfer.com
books.bemenderfer.com
apply.mytgroup.net
accounts.kalaakaar.in
leadership.tazewellproud.com
apply.mytgroup.net
careers.stasgroup.us
books.piggybankmarketing.com
client.clearhue.com
apply.mytgroup.net
apply.mytgroup.net
apply.mytgroup.net
apply.mytgroup.net
books.bemenderfer.com
books.bemenderfer.com
stasgroup.us
careers.stasgroup.us
books.bhent.net
finance.travelelements.co.th
apply.mytgroup.net
books.brandwithsms.com
books.bemenderfer.com
careers.mohawkcomputers.com
books.bemenderfer.com
stasgroup.us
careers.coure-tech.com
apply.mytgroup.net

Certificate

The complete raw certificate details for stasgroup.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299588358800919966837060410718034585829886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 21:03:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 21:03:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stasgroup.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813540977801400363781946100245505935407000249479274526143648814093260813903113377663046539525890204329677530498051557725045325986004964823043699971180702288179712208360108088909158075818852814681044237902052920885966514294963722524486018549374463625541466324735772273177548315827503620062324964142398995105166946968299356239543390516174329677687957338619453026501582198710902017955313661384992918582583465807934838304194831173374464805911103158145074256729350538701958744829274889318644783081970508005068225710201226426734830338984064833904007755090606748870842007837897678752184601087129692666345967647109189864436708718758737516475582764606671541837010185538914705906074618189541434906142175970105335294271688550014749374724497614714523232555529162068742032492265536613507309643269394189212626090466288794810257923836218070546095470972553452452725470399444342683295343350836290719963390333235615903103235187563540289027716154571798130856199857156989496435771577368594268570484979464006504106592355230873189331408195751819438395252937668492544497089311729697469030659918488433391576805117496987311411890782641652043375866886881310612453899647404811773112266347973542404699044015961590106044441802509552141560201978048165421447445019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							396bfe9ff6875346c37aeb5d33390ff565d6cae0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stasgroup.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stasgroup.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c304f10a10000040300463044022033b4ccbeaee462747f28ede0f4bfebc9c8b8daa96362c97870b3c251f56261b602205fa77a3f787d32b3cf1b89ca270b8cb66f9b7db6c878ea5ab1c1f753328aec71007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c304f128c0000040300473045022100926ca240eb5897f17a60968417f8d86b823b5c50a1ccbfceccad7b6f60e737da022076318409cf78d6c2e1583d08e5e4e465fa11d87ef19dcc4ec74be3d1a72a3c19
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ed78d5efd1e2b23392e612d8eeebbf46afee10d1648b90d6d0c3d9d27a5b4421e690100144df6a0c6ee3b5f59dd17e403e5b0995fc524aef47ca87aec3d9c02bbc62059b5fe9107b37d16b11209d45f284581c9f18ffbbee5b484b1eca8a19939ddf76192d0aca018ad527ac26595b64feabb6b8c2a21392ae592ad34c16d9aadb5e88b2beacb196af0d340455d3011f7eeb2b81bd4a5af4dee91cc5f98d92e0a82c476f94751a2526fbd5a4e3d088d0811d9efb85f0260c7337c248a5ad98046d747850b26d64521f4a5e0fa1b2edf62e5e2a9e0f4bd5d6c0ce3b13fcc38a1211f558543a34106d1d3835544f1809ecea292ec223104283000a4204912cfa7