www.michem.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c6:ee:42:42:33:35:2f:51:29:3f:16:8e:b2:e9:53:32:6c was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.michem.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:ee:42:42:33:35:2f:51:29:3f:16:8e:b2:e9:53:32:6c
Serial Number (int): 329029466742912159019538789843431794618988
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:dd:30:c5:bc:b7:f0:55:01:51:07:f1:e0:ec:eb:9e:b8:ca:5a:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:4e:5d:24:bd:e1:c8:ef:9e:4f:44:38:25:58:f6:67:20:5e:a9:50
Fingerprint (sha256): dd:51:ef:f9:38:1d:1a:77:8d:63:d4:c2:03:bb:42:f5:7c:53:c5:0f:53:d4:08:1b:4b:19:56:47:1e:0c:39:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.michem.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.michem.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digiprime.com
expandingpaper.com
ftp.michem.com
host.michelman.com
licomer.com
michelman.asia
michelman.be
michelman.com
michelman.com.br
michelman.de
michelman.eu
michelman.net
michelmaninc.com
michem.asia
michem.com
michem.eu
michem.net
michemprime.com
mktweb20.michelman.net
performanceadditives.com
rustban.com
www.digiprime.com
www.expandingpaper.com
www.licomer.com
www.michelman.asia
www.michelman.be
www.michelman.com
www.michelman.com.br
www.michelman.de
www.michelman.eu
www.michelman.net
www.michelmaninc.com
www.michem.asia
www.michem.com
www.michem.eu
www.michem.net
www.michemprime.com
www.performanceadditives.com
www.rustban.com

Other certificates including the domain name michem.com

(limited to 100 certificates)
www.licomer.com
www.performanceadditives.com
www.expandingpaper.com
www.michem.com
www.expandingpaper.com
www.michemprime.com
www.michelman.de
www.michem.com
www.michem.asia
ool.michelmaninc.com
www.michelman.de
ool.michelmaninc.com
ool.michelmaninc.com
ool.michelmaninc.com
ool.michelmaninc.com
www.michemprime.com
ool.michelmaninc.com
www.performanceadditives.com
www.licomer.com
www.performanceadditives.com
www.performanceadditives.com
www.michelmaninc.com
sbc1000-shell.michem.com
www.michem.net
www.michemprime.com
www.michem.com
www.michem.com

Certificate

The complete raw certificate details for www.michem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77prm/CiCsRHz23z/nA5
8I8BsZfdu4D7h04rieE83bfCaH/uskvXL/G0V56Q87w5dz5rPLCc1a6XkDZeHOXU
mIFMdS/hIN8+AYTjSbzdnPpXe0BxRsSUldkvmgpP4Vc+1RKhc09Uh9125rSRaKIF
kWfsLSZeSozu4r0I6GCIX67qITfzRmNdIzdKZXETfpmJ+TmYJZbhry6MFQZDM0l9
mHQth+G7AWJ3Ehp8A13BXmQl4kVFCtf9S5T4/qYWxUlz5zzAPsqN+zFQQQ/7jFK1
GqGqE1jdMZrjwz4ZkBKpp0Ft+gKByCxSSyhwpDHXGmDWxSRy0kyRh1BcfaQXFs+v
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329029466742912159019538789843431794618988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-12 14:09:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-10 14:09:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.michem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30262882186765355588740176235879735438290750715823113457009771420705820092521604588033297295520003463266975260413477841352337506468432383017598283993780536332992238508924477524036500159172086394714371791156504262010362768620072758829941350907989958351141830859219208089690242422701799022123954782812800227382075032630997771108989735692935009902242189948479491907128022367566444599238381850439092787174414358147503624771440424840225486935033617056402581242560026248834717129037131293377321732306440377760676413465906948889639254392433961368425041931155522388617032015683183347819002522188715693747811354974199659605889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fdd30c5bcb7f055015107f1e0eceb9eb8ca5a2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expandingpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.michem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.michelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelmaninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michemprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktweb20.michelman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performanceadditives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rustban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digiprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expandingpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelmaninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michemprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performanceadditives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rustban.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186d65f04a40000040300463044022007d5d72c5d5fbb248775cabf51f1d8c7651b5b5defa8d47b1482549bf8ffa50a022067d77e840c84e1eede1932c6c6ba2fed543b7f5c6b787dd919279a1956fdb3ce007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186d65f04b2000004030047304502203c602834e630bccbcd20caa83469c28396a271a5d947ef4f418a5e939c9fc3fb022100a21bd310a861382bc990e7c3ca195f0bec0286240ea54a9c0256ebe641a4f929
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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