stephensen.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:98:d5:02:ea:1e:8c:d9:69:3e:bc:78:23:60:79:b6:89:1a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=stephensen.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:98:d5:02:ea:1e:8c:d9:69:3e:bc:78:23:60:79:b6:89:1aSerial Number (int): 313342918263463573402090820295130967607578
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 46:4c:cd:67:7a:5e:36:1a:ef:8f:06:32:1f:7e:ff:79:a7:09:53:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 41:b3:23:37:de:8f:5f:8b:6b:8b:0c:77:a1:08:46:fc:7d:4c:10:b8
Fingerprint (sha256): cd:4f:65:3a:8b:df:f9:cb:a4:dd:5d:2e:2b:28:c5:65:29:47:cc:33:c4:b5:bb:c2:58:0d:b4:48:66:ad:cf:b8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate stephensen.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stephensen.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stephensen.net
www.stephensen.net
www.stephensen.net
Other certificates including the domain name stephensen.net
(limited to 100 certificates)
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
stephensen.net
Certificate
The complete raw certificate details for stephensen.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgISA5jVAuoejNlpPrx4I2B5tokaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMjEyMzQ1MjRaFw0x OTAxMTkyMzQ1MjRaMBkxFzAVBgNVBAMTDnN0ZXBoZW5zZW4ubmV0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHf9AATGIkbbVd/1X5Ra2lYqR+nMezHx VEytJXknElfNWUBaMCKG2mZ8ps1bQfx/BQeAxtvuqgxGM0NNXcUt3nnHUv/dbG95 Om7tCCCI/kQkhOCWjJV2NXPRPDuAA/ekaZzPngCbbqrbpELYyyjdpcR7nDKHtdhf FMITXR8Uwk6KifbEaByg/gwEkjB7/kHj1a419Lyv5/DRcdlaOFUvb5UZwJqEljOD sfE7JEXfEPYL7iJdDcny147V3Aop/Ng8XBoBCjaDpvkM/zfgETrthhYOd6qtjbK3 ESLzQmj5+8plLQ7Gw9tTtbBZo/BozIb6wZbw0irCeMDg/z+Ds16KcwIDAQABo4ID KDCCAyQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRGTM1nel42Gu+PBjIffv95pwlT SjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMC0GA1UdEQQmMCSCDnN0ZXBoZW5zZW4ubmV0ghJ3d3cuc3RlcGhlbnNlbi5u ZXQwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy eXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AHR+ 2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABZpk7ytUAAAQDAEYwRAIg Dl0Bo14NjwsArwynRaHYm6H/gTiQnaXpkoQjCyZ90J8CIDoNKOWEeXSpV6CaYUlK PGzeoVYWu5fAIIrIeOzRWutjAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH aFRL2I0AAAFmmTvK4QAABAMARjBEAiBmTnX4g8XlgJAf8gm+sRS5bEOjNDz+QK36 5A7n0E1eUAIgfIyGLugz7VWQeiqEbY0jQjuhywid6G8H4/EOJkNBlmswDQYJKoZI hvcNAQELBQADggEBAGNVPTEBxoKUSCpHQwGkxviY4RKRd5Rg9NrJkL3aYReV7TZT 63YqR+mOolkexUD/ctf1TEai1Fxe9UlRM0jenB8W+1KS76XGVAd/uQD3+6MEoCJ/ C4SJY9MwalMcLK/ixxagyO4AQN3OHJqDwBKtmWTfwcLmnmXTrMYuDm1DNhDLO2ck 31x4zbUaMVry017eY2jIz957LwDrQFt+wV2jv809qrt79my3mwEON1ynE4t5h8MM gE4oEKiQUlvEG19cxUPsjbxD7qjExCDL1FNJVP+/A+4uLSg0BvxjcnQywskNcFkP 4WzuVPO1MhEGfcu5dP50tIO/MT8TseT/yAZL4u8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHf9AATGIkbbVd/1X5Ra 2lYqR+nMezHxVEytJXknElfNWUBaMCKG2mZ8ps1bQfx/BQeAxtvuqgxGM0NNXcUt 3nnHUv/dbG95Om7tCCCI/kQkhOCWjJV2NXPRPDuAA/ekaZzPngCbbqrbpELYyyjd pcR7nDKHtdhfFMITXR8Uwk6KifbEaByg/gwEkjB7/kHj1a419Lyv5/DRcdlaOFUv b5UZwJqEljODsfE7JEXfEPYL7iJdDcny147V3Aop/Ng8XBoBCjaDpvkM/zfgETrt hhYOd6qtjbK3ESLzQmj5+8plLQ7Gw9tTtbBZo/BozIb6wZbw0irCeMDg/z+Ds16K cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313342918263463573402090820295130967607578 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-21 23:45:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-19 23:45:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stephensen.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20762250441295769721012468651413274769754881680790563733124588570529964293686149719416374076149280863814852877906120728961034921466600124662123711136028344789469061595720955958606415658647861483343000927012512606540803591588281365576250049076261269256773605399414971012314211425760591058727471049865087460913090624776148601011965242763292232854271943972631923659441498335182813632223377050049899935576925012517920237376425953404847492825462081686032992886262211881806566004880545773711718025433853586975002503441447664377050031599580319970499471587457535652525630759867570865124524211515862627801264820676364785846899 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 464ccd677a5e361aef8f06321f7eff79a709534a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephensen.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephensen.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166993bcad5000004030046304402200e5d01a35e0d8f0b00af0ca745a1d89ba1ff8138909da5e99284230b267dd09f02203a0d28e5847974a957a09a61494a3c6cdea15616bb97c0208ac878ecd15aeb6300750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166993bcae100000403004630440220664e75f883c5e580901ff209beb114b96c43a3343cfe40adfae40ee7d04d5e5002207c8c862ee833ed55907a2a846d8d23423ba1cb089de86f07e3f10e264341966b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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