www.swanson.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:35:91:e2:a0:7b:72:be:6c:c7:8d:46:14:18:e4:20:3b:34 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.swanson.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:91:e2:a0:7b:72:be:6c:c7:8d:46:14:18:e4:20:3b:34
Serial Number (int): 279565738015535432250289456157031426702132
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:8d:31:c4:85:42:4f:02:f8:5b:c9:da:65:24:76:23:2c:1a:12:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:81:78:5e:65:4e:78:28:8f:1c:94:ad:c4:c1:bc:25:34:dd:18:19
Fingerprint (sha256): cf:7c:bf:68:9b:5e:2c:ef:94:c4:e5:a6:fe:5b:e9:14:9f:db:41:bb:a4:0f:28:d1:bc:eb:70:26:c1:8f:d5:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.swanson.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.swanson.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.swanson.com

Other certificates including the domain name swanson.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.swanson.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISAzWR4qB7cr5sx41GFBjkIDs0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTcxMzEyNDNaFw0x
OTExMTUxMzEyNDNaMBoxGDAWBgNVBAMTD3d3dy5zd2Fuc29uLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAN2et1AQpAIzE/n9R/8gb+HVOosXvbZA
OlovN1wnCUsqrK8GerKQ9t1AupJCqk+4WJ3JRu5K4hiRBV4+JyYE6fdti2evUB1a
kAwDo+ocwR4Cc9oTgGAWoci5VBMJv50jmpyCTIiH4CoTZ7VqeJL09lp2h2QrKadF
06ALUxzsBpaMr88rzZ8oISWt6Ovx3pZE1PlYfGLKy9jvB9nwuZlFZNJ0p7qOwdVP
Ew6oFNnKdXKLtP2+ccYBDrQwPXYOXgaAvSSe7BIWl+qEISGZLzIEZsz/eB+KIAPq
SxOeVxXeaJZ3zfzrm7TVsSIckA43s6UFQmsZqdXDLtjKRtNLEQoEK6ItIFj9j2uQ
21tmuuFrbLeaBaw8LCYvywMWZFiD+MwXIpXZMmLUCkhIuoja2euuWlrc+lxb8q68
kQGMmjIUvqaBI+DlugZPKQwI92lyr+CylbYpR7gJyG+MscyIBbRBLqptjhwDpkqH
GBj2hlSD8itDIAU+gnM+YwWJzC7D3M6IZWr/vHOQQrVmDhNOORPXBd6sUjZe4yur
8pk1UY9KQb6+zB/jZyeNjtSF1CvfB87cyS0/fB8X1YuH0D8iSgn7arKnWg9GJ2mi
BoDhmsa0WkafByFVJCeh3X+AppzKMvnyHXp08KvdZaaJ3ryiWipy8akL7yuZXW3O
LXFX3R3HeGWrAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNmN
McSFQk8C+FvJ2mUkdiMsGhImMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LnN3YW5zb24uY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFsn+xf
ZgAABAMASDBGAiEAhOReZofTUap4VuCcwMtfqAy4A+nKVfVXmdZF5oLz+FQCIQCB
eZKmjxdzd0Wgw7AqOtDa3LiHT2PhLQI1Ws4N2qC2bgB2AGPy283oO8wszwtyhCdX
azOkjWF3j711pjixx2hUS9iNAAABbJ/sXV0AAAQDAEcwRQIgFtIwWoewy0Md8oik
ClmwC1aMGWiguZOQsKSuaFVgqbICIQCuQZY4nq+s7ku9O+CJwGpURopbb2Ux3+KO
5Sgu/vrVhDANBgkqhkiG9w0BAQsFAAOCAQEAHUQa2pCsWmxksiOoQXM3sEhIMQh6
8sfZ7msudnG+a7tCYjv7+dx6x1F3k5aFY7fK9rLN1xCbnP1j6xPeVG9RJjaSXAsP
Ep6wwiRWuDQHnhO6kBTyIZuvhDPOJkN/BETlDbo80y3MpQuf5Yp9nTvc9oXkDhcb
8LaV/zVXDVWjgFmuAXXwc7ErWxSShuBcNBlDvG0YUiw0SExp1EnZFqqbWCKb0NR0
eaZVSrGlVIFbJD4GvEv4rICO243HR59lIkwEBEs6mXCXp12z/0Eo3vBJeCZrop0N
GNlvbx9YzWUKtVKK57se6EfE/oLhIkdG53Iqqp/P3xgmb7NFV02d/C6jWg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279565738015535432250289456157031426702132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 13:12:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 13:12:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.swanson.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904130655653120443368426358629258475030797617087065198954481379898794067581474753488464616076662763964190056765464239219615277486597425203786063490617277453812711222825425596074326462237451772875714372245964580466324514404249320792580636475532481616754092683275553252940579089663682703890155254306759254136024613444803772887424870882002774354141793947444040819123033600892723599458100047076508889364094488285073154875993559836200376633688853374166450296222202747809970388298821046797618043328333192156322917352159171597215114628046744582499033145425946693102658480236514592155054427589799492707893493904673215016310398086511972063570940560393466809874436124002682526022186068544885240870691841485238440118506478287861239538250694744197526321219200442832433881230711011760604301502714650700443754096035338747324137663925588377838462544273784717813935839463079353164258979837379648308686710801642189453394233246138033131050751275996894394494135298461743735310764990302524876961637824463265354103894892451793018152610066021918301367521580973469493712981202955779185588476810993972767668387854269105973979483875664012839907803010096325203841340043343494237027930087365070326014021090542232257223989511848516115641576803897352454080587179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d98d31c485424f02f85bc9da652476232c1a1226
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swanson.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c9fec5f66000004030048304602210084e45e6687d351aa7856e09cc0cb5fa80cb803e9ca55f55799d645e682f3f854022100817992a68f17737745a0c3b02a3ad0dadcb8874f63e12d02355ace0ddaa0b66e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c9fec5d5d0000040300473045022016d2305a87b0cb431df288a40a59b00b568c1968a0b99390b0a4ae685560a9b2022100ae4196389eafacee4bbd3be089c06a54468a5b6f6531dfe28ee5282efefad584
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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