kimsheldahl.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c3:6e:5a:f5:4f:8a:e7:94:5b:ea:0d:51:95:2b:7b:dc:34 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kimsheldahl.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c3:6e:5a:f5:4f:8a:e7:94:5b:ea:0d:51:95:2b:7b:dc:34
Serial Number (int): 327838606706609715822847305015178924121140
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:32:e2:ee:df:b2:4c:68:71:da:b8:c8:d5:b6:68:cd:35:a1:d6:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6f:74:d3:eb:e8:bb:5e:bb:fa:6c:e7:b8:3e:6a:20:06:f2:46:df:62
Fingerprint (sha256): e0:d8:cc:40:1a:a3:99:34:11:36:18:84:bc:ed:bd:e1:af:45:b5:a0:78:73:11:7f:bc:7b:f5:09:db:a5:68:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kimsheldahl.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kimsheldahl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.kimsheldahl.com
cpanel.kimsheldahl.com
kimsheldahl.com
mail.kimsheldahl.com
webdisk.kimsheldahl.com
webmail.kimsheldahl.com
www.kimsheldahl.com

Other certificates including the domain name kimsheldahl.com

(limited to 100 certificates)
kimsheldahl.com
practicalpriorities.com
kimsheldahl.com
webdisk.kimsheldahl.com
kimsheldahl.com
kimsheldahl.com
kimsheldahl.com
kimsheldahl.com

Certificate

The complete raw certificate details for kimsheldahl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgISA8NuWvVPiueUW+oNUZUre9w0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MDkxOTQzMjdaFw0x
OTEwMDcxOTQzMjdaMBoxGDAWBgNVBAMTD2tpbXNoZWxkYWhsLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgObETuAgV6/+oyV4U80ythZ7vmnqJY
2NzJqgfmutzHQHyGnyS0s+PfVmeHB2JD7c3yfKT3vJBKsKy/9ILha8m+6POR7Yod
wk6FdX6d13pPgXrsrgIo51M2b2k7M0uNLRRT82o7D4XmP6pIxlgiE0ItTwnIcBbu
sEXRdJK0F3YrJtnKVY7Zsx6/2NS/pFZ6Tcv1LvlEkOZ93dpxe0e/B29kfrLvRSyl
2bNnHowPwWMAaIe/OtBL5VuPf7ijbzL/dl56TfGPBuYQ4By/IcEBzo+pUbQkEf4U
+kYk94KIxk0VGrMVLUVA4HZNh0yJ3sPCGNBcxW0kipbZSe5Fo8zFRZkCAwEAAaOC
AvowggL2MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUAzLi7t+yTGhx2rjI1bZozTWh
1ngwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCBrwYDVR0RBIGnMIGkghxhdXRvZGlzY292ZXIua2ltc2hlbGRhaGwuY29t
ghZjcGFuZWwua2ltc2hlbGRhaGwuY29tgg9raW1zaGVsZGFobC5jb22CFG1haWwu
a2ltc2hlbGRhaGwuY29tghd3ZWJkaXNrLmtpbXNoZWxkYWhsLmNvbYIXd2VibWFp
bC5raW1zaGVsZGFobC5jb22CE3d3dy5raW1zaGVsZGFobC5jb20wTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBv
U3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWvYehR3AAAEAwBGMEQC
IGgjlsn4872lICzBa+JhqUfagibVILK5UoSyccy9as2ZAiAIKq6fGhGFYxZ32064
9y7mvbvV5Vjf41Ds3mW/qDOM2AB3AGPy283oO8wszwtyhCdXazOkjWF3j711pjix
x2hUS9iNAAABa9h6FEMAAAQDAEgwRgIhAOHxdcLL4mPEOLPGBfIHsm4g568lAkvs
titNAAaSB8s0AiEA097deeanYx9p07hv7RLnrHnNTJR6nj8RjzDbV6VhwL4wDQYJ
KoZIhvcNAQELBQADggEBAFzoDb/HPnScfsOtRtygzJmjB3haXM5HwrDjJMZLdYkd
AkUCCdAOy78yuULUzL9nl2y82W2/WCyDTnyR1yIHFiub49Z+AAT/loH6+HeSgL0H
E+ekyclEVTJrxb7sS/hdjHORoKHdAC3Rqs6WdIWPFw+RZLldhz/EeBhvSefoXE+l
wZqIj9+z7T6R4Yd+CriYK8+zBCwhjznRrpy6lcvOJlAi51Hy/fJ54ixI8HtirC9C
7EwTUfOSPaKFbn+Mj6ydwcYiKTcWU8CaHhosl3S6ULPgZzzCm8mXUOu6sFZduF+h
sBtE5AVDTFc7w/tWxHyYdCVpqYDXp+wdtjI5Oc8q33c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA5sRO4CBXr/6jJXhTzT
K2Fnu+aeoljY3MmqB+a63MdAfIafJLSz499WZ4cHYkPtzfJ8pPe8kEqwrL/0guFr
yb7o85Htih3CToV1fp3Xek+BeuyuAijnUzZvaTszS40tFFPzajsPheY/qkjGWCIT
Qi1PCchwFu6wRdF0krQXdism2cpVjtmzHr/Y1L+kVnpNy/Uu+USQ5n3d2nF7R78H
b2R+su9FLKXZs2cejA/BYwBoh7860EvlW49/uKNvMv92XnpN8Y8G5hDgHL8hwQHO
j6lRtCQR/hT6RiT3gojGTRUasxUtRUDgdk2HTInew8IY0FzFbSSKltlJ7kWjzMVF
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327838606706609715822847305015178924121140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 19:43:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 19:43:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kimsheldahl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25254773203484637778729686584654209842922685653915070278119223269750137024385590431047930597056979775378945316403177067190020738181851404471725434981290242594273806353665554732288078485293172338087184753770255551303672853440593220392689812251727611327730098860155963594847234924633346880326283740974391553475636982062409979689663634230996607174662187616389570464200452691128398835144193649883945602540905968036172826255548774248314506949456870382391496603898507239938494033415967439241842493104721715415226465053253938132998080959709942251931064698026319510704088764861477047435924032145159139393143285784502960735641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0332e2eedfb24c6871dab8c8d5b668cd35a1d678
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kimsheldahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kimsheldahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimsheldahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kimsheldahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kimsheldahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kimsheldahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimsheldahl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bd87a147700000403004630440220682396c9f8f3bda5202cc16be261a947da8226d520b2b95284b271ccbd6acd990220082aae9f1a1185631677db4eb8f72ee6bdbbd5e558dfe350ecde65bfa8338cd800770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bd87a14430000040300483046022100e1f175c2cbe263c438b3c605f207b26e20e7af25024becb62b4d00069207cb34022100d3dedd79e6a7631f69d3b86fed12e7ac79cd4c947a9e3f118f30db57a561c0be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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