mercersigmanu.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:32:b3:e2:77:79:51:a6:06:8d:9c:07:f8:d8:44:9e:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mercersigmanu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:32:b3:e2:77:79:51:a6:06:8d:9c:07:f8:d8:44:9e:d0
Serial Number (int): 327419032392159993537245533845631776628432
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:bc:ae:37:65:c2:df:96:7f:9a:0d:8a:80:17:dd:ce:7a:b2:13:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:3e:c6:b7:dc:26:a3:f3:12:c4:ab:b7:ae:f8:d4:71:40:7f:b0:e1
Fingerprint (sha256): dc:c4:b6:94:9a:19:69:2e:98:02:8b:bd:83:ef:18:d5:2a:21:1e:95:6f:90:cd:98:b7:ae:e0:7b:8d:77:e1:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mercersigmanu.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mercersigmanu.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mercersigmanu.com

Other certificates including the domain name mercersigmanu.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mercersigmanu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArt5Xu6O3ApAo6mwp3TSi
dnJhuiOsIaRUe5LkBrxpoa/+es/RCdjrngOBK3CT+95NMDlhDVrVD2nOgM097pA7
WuMEZpltJhtHXPCvoDH2mrDhC3R070JI2uXfmLfNWf8+iFBDwiBnIknLzPfH/xeF
y1sskl2dEUTBB/cw1i7qRUkoKeqwNJAeZXuw+60gm76aHDUa+5SfgG7dmDeB5XRo
83bA4yoI13gUpiTaOwBoxy+Sb7jWvhZdgrfG8FK8HZ6RH0xPrUKrzOmCOYkL+5Pr
8D9QCS7hB+Bm+dG5QJ9m3WD4kgfL6bLJ58NpnHApCtDcEW2bZUoOPAnsF9rKAX/W
EVdD0LowpbF74mbrsbsmCnihk5SY6NoW+xSl4SvPD/bm34PQDU9f60mu0OO1yxoe
YPplYjAxsqyucC3XoxtwDTgVR8cEnsGzuOEIJMJr1by3N0rDpaUuuiOwmeTdFEDH
YgUnoTTbvBhrXQ7VkoyZF6u+VEGTxnF7AIV6B0qUTYqih8Mb6Tq4s7LFedyr9o71
8ACYdPNFDUHfSfNG5tUKpJoOonnU7zvJRdH2aKZeFHAz4nE8TuqfnhVPfsc9yneS
w1e0pAqnTvwa4JcnTViX2aHvx6/F/dKqu0DuB2hzqqCiIbmDUBl8jiFqTIdr7oFW
4N0pmE/EQxjKfHn+PEIIGL8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327419032392159993537245533845631776628432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 08:31:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 08:31:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mercersigmanu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713401345590498767878689120545716241763325914690841423527882515133751007980371573651123364532283229603787456377247559227159385918395298532721251573261443015604563214449568962744203786220291227882414942149469822455481651100219258946861166778856169302210399770660539229154949218006439730736225995182168781659019787182182120698293894790224985231807211011502831765835834136262601366795035430812300860694551458045725085481905140508126956263455731465129486169427811939275974685930110006778867074648775531550268806469837842198415732776141110329175713035078147631912897659514561421304531548891337498976965141609025298024356481163232715025840554704559342835314247079176309007447338165814961077722249228159297098228874734663326360255167252938569727062457746267131711894167308087838365009016252206997531158037046469710038421956020664620996021192596991287916258931233940240538478544089855422474543832393466256450090779342518993364627869013935951664107288455346278391954133811666441044733608056093815292522014703867890191303868802302194021493870764767508384767736254749374550595098986352130225201535755303918708192441200400619698293186976713574268503095127776350689360472395739904669502071068847511215957018005532975937939425703589279514040473791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbbcae3765c2df967f9a0d8a8017ddce7ab21353
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercersigmanu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001701efd599b0000040300483046022100c081dc8cb3d4bc666373d332caf0c4dd01b57fb6ebcfebd22638b641341c003b022100bbde5def5f5ec9edb821cb166ea27d29c8ccdbfd90cdd54074b4bd808d1384e500750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701efd59ce000004030046304402206e3cd3caa58e8917cb83a0e2d9528ad74ceb762e89bf86e7422fe20d2d70e5d0022044ec640c5eba7da0a180e71e147bee59348272918dbbebad89d253c70e46965f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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