ndurant.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:8d:8b:0d:fa:b9:92:45:e6:f9:19:9e:c8:b5:c6:68:68 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ndurant.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:8d:8b:0d:fa:b9:92:45:e6:f9:19:9e:c8:b5:c6:68:68
Serial Number (int): 307122838122891300559212098928551521577064
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:9e:f7:77:62:f7:e4:36:94:73:e5:27:0f:07:0f:dd:0f:6f:01:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 64:c5:4d:e6:72:b4:4d:c5:65:91:6f:b9:31:9f:4a:39:b8:66:38:a2
Fingerprint (sha256): e6:84:ae:69:1b:8c:9d:7b:c1:b0:d0:0f:a1:58:d7:0e:9d:9b:67:91:25:96:6f:50:ef:e1:cd:9a:fc:fc:62:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ndurant.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ndurant.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ndurant.com

Other certificates including the domain name ndurant.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ndurant.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1XUe8szza+k4FzF8wXMz
ErhJBqPQonwp16ZID+jf3+71RldLGalKdVguY1GxgXWZ8EOAsFHIX+8L7Nc8FUke
pj0/SJAzHv+SLVNvEjwv94WKyFS3pUaWJuQnQ1OWT+N8F4r1EP4yxsjK8Mnk+SAz
C2RhYWMbpWoxpnU1NeKE9PM55ff56MgoMAo6BmT5sfvpo1kgtYK+6bbhCnYhzidC
GkyNsH28znKpXewvoF2rwkPHTBmGFk3uDafm7nOTAfPaIDMfi72fio2t0HaV6fnq
ovfqFb/QM9bScoUQASNSYZW+NfdKgqFuvImxf4rqR2tKPEfpK/Pf6eLodLpm/Amz
bUnH6ofgO2RJzDFVdc/ZDGI+5B/7T/sASTYN2WYnWtRAUR/JaikfqqIcYf1oWpYq
GQ0ohpTh9f9l3VYIXzOW2WtEs5T3ZNEHI/VthCKR7fddA2hei7yiQmig3cM54Cx/
Xr1ue2JQbXyDAQbDUM1Vxg47Nwt1iiWwKgR6OxcynbcVshRIzjHCX0/47j/ferJ+
K+KUEIr0ETVBNLsArqQ48xBIkvzcyoXp3uIxwXU52Z9UqfcfDu80bIHL1Pp+Tio2
oZS9UhlwXcnGQtZPdaZom9jwLdt/fBpn//+oxtD1g/VEl0a+6CZcZiW8UaCMZrck
JiPpoxLP87fPnQhbkP3HjWECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307122838122891300559212098928551521577064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 20:08:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 20:08:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ndurant.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 870830637869881767683913820212064690729761959191033198805064648219035927664923635518430775953183239607299619970337132142459443973983643387687777579182993731627904700989905307447001263014647262143255096721899000591675441788349305130873776777626522212607434032340013591744364304191543330859386019018762810695837973317063108163354312468986883336293746303942855144939513921643127900446762044552262847793855671461744533039583237696421054552131017265848339203357913238126327379288095939814076508917656918057203839931926876767452544956892157782275218760778413434946065371801502197873099668050763979365106051587347905841649277987018781016171878881983849312269598162785625217171760185622969476423732768931328796741790308638794463919334892018292901311082812806361044192073787069709629723148105750020570534088778605184525466856253455928484362662172908038525668045027927280911700085216068746318712924590283019154976560344952872783173959303158116678651376699517476486957330270536419472819635044461010558006082546716397295923264371362818272044389165314004814534416101069407651591223280069515054774167517939018836456253542717515624634885669641271683277394941386483946047044651402217390499445031023497543137420949926596875135588439410497906245340513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							209ef77762f7e4369473e5270f070fdd0f6f0126
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndurant.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001705a2198a70000040300473045022100cc2bf59d05ffa7c58fda941f437456ba0a28514f92f22f6214602edcb12be1f00220645177807b280906f8e929b52b175a7128c929618690d34e661fabbed4c21bf0007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001705a2198b100000403004630440220257b2f9c822732ee40d55e5992433236b423ddd211fae020386f7e3238996c8f02207c7d740f0ecb510298fd2638b75a90a715e882be81fabbf646fad16a314e808d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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