www.sierrawestgroup.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b1:38:31:8b:1b:39:30:8a:39:b8:c2:ba:18:18:64:9a:6b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sierrawestgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:38:31:8b:1b:39:30:8a:39:b8:c2:ba:18:18:64:9a:6b
Serial Number (int): 321641530752008666090543251883801700506219
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:76:2c:e2:52:8f:d1:f7:28:02:90:2b:a9:df:b1:12:dd:29:3a:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 83:29:e3:7e:be:c9:18:6a:6e:6e:88:59:e4:58:28:ab:fa:b3:50:64
Fingerprint (sha256): e8:6e:e9:1e:0e:02:47:9a:79:74:a5:b1:db:3a:48:45:93:a7:01:0c:f5:00:ec:85:a8:dd:1f:00:ab:67:d4:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sierrawestgroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sierrawestgroup.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sierrawestgroup.com
www.sierrawestgroup.com

Other certificates including the domain name sierrawestgroup.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sierrawestgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321641530752008666090543251883801700506219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 16:22:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 16:22:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sierrawestgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779776691240828711309287606644279483724595413577392646737618813854637106231344527569165291577669562646326202053904419148313046435795566032822960368683978031663335216675490975890525722322923698938921535907099949533066301041433972448488392752490721425468321772784642043735318845498714138116280834118735888309611617953384249257744937674169116347895686521987710378771928674296607742465733404870534425423109249298937535362576054196893872720068173035607966665264391347732074742760125668288999148735567657481601796643118822818474478328988398485196128598737730202094870066311094194232864672340729135428183477601730458731440176558946673173031947140558916809588700525824783912276896600625868987874700161403324703470678039777451609858851083257453883231358503139841090911880594172679010317195338060381027915189515988213152841191758879991477243750332030192046888233507653304499295339434248593080716366859931795110909333216867716462853704169586941613771235987265055142293541801770616512386801624716428695705740645874610884111116551900150862824545720270090176402732032864493600834514609192735513595162885363399153570894075512500957323926090051303787593916641703303493641840021270742492416208801930925850367820741631050378449460368831618936636768949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a762ce2528fd1f72802902ba9dfb112dd293ae6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierrawestgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sierrawestgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c8319f5eb000004030047304502203c26cb8257f00fb282566d105a9167eabfbc103f55c1ea4891d6002cf8b0457b022100c759103ed004f227d5a549c22efa240d15ab05d3e916bfcaaf820f43981d0eff0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c8319f5fc0000040300463044022037544eee485c161ce9a9d440fbe68ac6db5802e1cee254c60ac25feb0d627c2e0220015f30d9787fc660c5d7984cfa6216d5d8cacc32663d8242a043fb0756af60a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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