message.ns02.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:a5:30:7f:ab:5b:af:a2:0b:9c:03:74:85:ef:7f:23:a8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=message.ns02.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:a5:30:7f:ab:5b:af:a2:0b:9c:03:74:85:ef:7f:23:a8
Serial Number (int): 271084338508063148624452532042520787362728
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:99:b5:cb:6d:aa:e3:f2:cb:53:4a:7f:b6:c9:1e:89:1b:77:d0:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:88:31:da:34:57:95:91:97:88:ed:b5:36:1d:b1:54:ef:f2:ae:09
Fingerprint (sha256): cc:9c:cf:46:54:7e:7e:0e:3c:63:5a:1a:7b:ae:b3:d5:d0:83:10:bb:bd:af:2f:e2:72:c5:04:e8:a1:7c:4c:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate message.ns02.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for message.ns02.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

message.ns02.us

Other certificates including the domain name ns02.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for message.ns02.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271084338508063148624452532042520787362728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 11:23:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 11:23:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'message.ns02.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722203277131171609824037333335755495875798864276560834328628557532091530957077002947009312959196211223963893018933507545736362588978138647883268995604528633539759530778047944882056457238965554268675038240222239116411086688944097958457545202804552920080659093052236319817903835307547953197989808007074071095458873099849083756284497997077129794840920926311489491778675272210111992319818205943338493670241782364858932498335184864099780817469200014481317415505377442259078898001764175819543629488784846701873855613199399764653147695521353312435331499300238006286417620465146608982973458830436875996819126161424800825344213728647123679604597564243246410896068824497071964609069138189827205292394414644490443407811934452916100147546897076734131017335067649731725360730529295232423555067789111485735554018503936669433084269941109274779895470793171716383587894470381706675891993705325860362204505468240731230199267148060941054958875408884031165874020133909689086220056261449506221081202949336054102902288862577690460030166516572083864044656950681375482219912569042336014515060910125890841810645379898873147573060297709018984369630829158726299029312964122144994357541157515713664827629539037599188345990252349083585349498007278203016506337467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2899b5cb6daae3f2cb534a7fb6c91e891b77d002
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.ns02.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c80a22ade000004030046304402201de25fa614ec1fcf46184df666351fe346ffe52d33a5d74555909524a82299530220368272e31077ebe9d7d6482b716d71eaeb7ab91dfcf3d070df9d6553f2def016007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c80a22b00000004030046304402207b584ea06496b880f11eb6fc613428b701428ffbbc12ac3126bc7ee72862ae8402204d737a721bcbb71a3129b5faff457f45e3b24f07ab21635c721c1a735683648e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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