www.chemflex.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:91:2d:e4:dc:c1:f9:94:4d:6b:52:f0:a1:ec:5f:29:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.chemflex.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:91:2d:e4:dc:c1:f9:94:4d:6b:52:f0:a1:ec:5f:29:1b
Serial Number (int): 270717458056773143037679135642284061567259
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:85:7f:33:b4:2d:87:a6:72:4b:82:be:7a:1a:3b:9d:e6:42:a3:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2d:9e:e7:28:df:5d:62:68:8d:35:bc:1a:74:a2:8d:11:8a:36:f8:81
Fingerprint (sha256): cb:e6:c5:97:3b:23:07:70:ad:0e:f7:87:6b:fe:6d:12:b0:53:99:62:20:87:54:ce:d1:98:9b:fc:46:77:1a:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.chemflex.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chemflex.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.chemflex.net

Other certificates including the domain name chemflex.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.chemflex.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270717458056773143037679135642284061567259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 20:06:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 20:06:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chemflex.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791389984623484417816780649116428291054542521131179630862058663833002856339773903176456777244101431030829903337207236250905999203181699255878493355495145425399434833976846518835726560340288200731290504278614092808996874716071825686347193637564673791971005500176857004558414503866771332239988081167485745346988174582976852313371652469189646975571368302470313479643197081027984068251907020061427090823450117484267478144484968569296649240355782776093409369869381154139890206756254505289407968674510281798945112062234544376336800873907096500563442911393198318034886016883448821558711390977633682178224682973333180344509004552343050302162848583373228645352111226817447970795679528655558514976027674430231314904623430578238845309465169593497877769603115844402825501229515783504964520907548983245286675014996531627113155233432049003634794248868564336533937136578019268594986877664875918149896310720381924019180101950621702907880063641190236870588720111126896449878181020288997592362898478748494656202345481541219797082342864923219820596329836998760963184770009696506107979543108022365973458389250649689244214997113033391002318645044807346756339458110274077186813686690870902995685085824889454132589318902483229455137630844638147501679451557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5857f33b42d87a6724b82be7a1a3b9de642a33a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemflex.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704fd302800000040300463044022038a9bf3bb68891543e3c181186e14537c73351da8157f6f346bd1cc665e646640220053a240b5595a4e78d18b44a8b18897e780465c6c03c9b8f4e5db80a2f5987e6007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704fd3026f0000040300483046022100aa2a090893e4dada65200b6e45a449c988157356671586512f9f4df96bdb954a02210088ddec5e76d8072895679a7b312e8e00b2e8a4240f612dec29b08be85b8f8ea0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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