www.bionmn.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:47:b3:a6:28:5a:ba:22:62:76:af:93:cc:64:c7:16:34 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bionmn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:47:b3:a6:28:5a:ba:22:62:76:af:93:cc:64:c7:16:34
Serial Number (int): 333572027561435300335439819352967825790516
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:07:7c:d6:13:42:88:c7:9d:f0:4b:27:a1:9b:4c:ee:15:cc:aa:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:ca:88:70:dc:a6:4c:be:65:bf:b0:df:e7:61:f1:c0:ab:1b:f9:8e
Fingerprint (sha256): e3:04:44:6c:a8:32:e4:6d:78:ff:2d:a4:a8:fc:51:ee:37:01:49:b6:e6:d7:38:00:11:2f:79:0a:f7:cc:21:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bionmn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bionmn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bionmn.com

Other certificates including the domain name bionmn.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.bionmn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5c7ZRXIGEuoh9VdFm37p
ZEVz3S7/MQOIKhvvjubzy3pdi/HUUpj+psSoSItAxd2cikvnvFOmq2QgFWPcCQga
ZnMjc9+C3BoVQrU6z/UxwGy6Ine/ewoYUwEszsLPx2ogko11/0KXrSkG4ijsOBvm
dnzFc2zkEBUjRikCty+u/LaQ45rQwAhOODS3cnJSBz07GY9VYRNXQeSm0de7C9tG
uS7fXAmsPtpLXpPzScP0Xdt0gOWiWFm5Nu+1YyzcZXDh+6yZ50opodV1xur4N9xA
Q78s4hkmiz4fNlSa1urf2EUqG4pB/xofAo2iUCSQqsJ0lis4+dSjHrfPSKkZ01Zy
GYz7S79/FJOVoCU3Znavp027hNYdGAh7PxcpCy3inZhq9FPVg/KlyJzJ9d8NtbZ3
1yx5YPVX65ml8znO07rZlk4e0APvcCw17d0kuiU0KwcnWFLgEnhlFq6oRj9qaqVR
P0pTtp+L4lW90RImbmRLRvAi5Uo7BvxwmtJvs2+tP6FLFQwApl2StG3nTO4uVEAu
lzEPSgM9cR/UaVykoXN4wyK1Q2Jxdat+CdC8Hp2g4EWJQK4dSCzfdMQv6I7ud7eg
RFFWTj/1IOwtUqeYK/1yxttLWY2UWlKOvEGeQZ/N0HrBgRLs2I7QDhm0VD0fzpNf
HcWBt+Gz8IgypmmIGb+76DkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333572027561435300335439819352967825790516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 13:07:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 13:07:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bionmn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 937534855392274678495619103219806542834634293272073918132622892022000866613543447935417584667497280876212648677934308578690352987021864108051507064494685781314055827563010310297121893773537745479383085063043358192139625843177084814291618675022131871156398439433568914361333791452943869707582996744762683016477329823403502670220353589626404865038068369934987760211855340371590229251548909204059826418971246820886222748025935464916536663293028154413531913501932243232143021697531531426979173853696144131259872377072704952550702673374981315444160077890717434428926092495699679977634464468130385297937268165108831631950236696448503231629684020752029385768628247829424958191535256023396001791224194144845627971847610977662347129203150684073706320407349339812280045835677937420683490354096603436213028653345122658406232920380004511152776277088189953863874167850826604852275626277900952976151944221231249072075209022766998921068314182290480167221571217413862054491767003463958405523506766900142667896294770226039848054367883195198954068643929696920266735382405972084435433679063467580966315980681065065780920274392683341270091299778860029691998656824964116647282615208816338600775902848604449269940831236691356161121362405276671722034817081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73077cd6134288c79df04b27a19b4cee15ccaa92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bionmn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e0d8b6c3c000004030048304602210085ac19ed846171fd17e9157de25adffbc3dca9d2d445075b2ed85f9480876ae9022100d0efdcc86e8910b2031d67e45cb347630f7d5bd746348297bff2f23ced1c14fc00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e0d8b6c3c00000403004630440220631f3b0ed41f50cad31cdaa723fb15c1835c164ce973b3b04412e63146e74a44022024b7ee38f44952c96f6c66e19e458fc1df9e4293f7bb74c7444090328133a329
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00305129f892bf153db4b9ff69cd7b9a215eef6bebf7272b22faa2ef9d575ce847a92b8e1412ebf8362ca606acebc047f20d8805d8a4f40410d4c0ea8cd303d418b0860c58c775382aceb2ed0b7bdecfda2814353bf5be2ab1bcc1128e07b144ff8db4114b765491e988382428b4026d52e2e17ae0416c823da0e5e2c736f826d5eff75d85903ac5576c8cad1adcd30d14c81598408408ff982d007099cd347d0b9828241c993c18430f0372be162d4e9bea2e47ae731d6b8342163d2d955cc0df6a6de1846bc840de3cf6e3292bc4b0f63a8313afa69c29b63a884f29a00e9101a095b6e52c76d9d444f8e26c5c560d1d4ed02cdaf585c111d11ff8482759b995