dynafirst.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e9:7f:4f:fc:4f:a1:8e:e6:85:3b:74:fe:ab:24:34:2c:ce was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dynafirst.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:7f:4f:fc:4f:a1:8e:e6:85:3b:74:fe:ab:24:34:2c:ce
Serial Number (int): 427904162484012401942200762636581354089678
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:26:e1:65:72:12:25:53:44:c0:b2:15:34:0b:ae:94:2f:f2:8e:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:a1:b8:53:3a:e4:91:33:b6:d0:35:9f:8d:a8:39:a4:71:59:43:80
Fingerprint (sha256): ea:33:f4:a7:b4:ed:47:28:54:e4:f7:a7:7b:2c:64:5a:fa:6e:49:f5:2f:3e:44:38:8d:87:be:e7:82:78:47:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dynafirst.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dynafirst.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dynafirst.com

Other certificates including the domain name dynafirst.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for dynafirst.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427904162484012401942200762636581354089678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 04:25:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 04:25:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dynafirst.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940677801047603315430984739186897494039852971902553317126053346281698422273595437863763100264625394025086577254073117894912884056417065189644226498502932299317026702216474163301861562165530802721222011698064798103247755945815569156955662030944145700808662002373460216256615403860870913481370244167125403023447639784383039417674820660445570242435748267767811020984837776628170058252037550503641734152549556288328180233404373233935493369219300163749181608103735799871307054031557048528408606249569470751500827497863599274444628720310288526614085592950211952524694195676084958427020634316205721589255499096395949054541584309816208781882227219182862859105580457657633450216343811892758087632271834886094370874060727226141330593595511214627299315834642402323287032134311783756312926203822308838323892323207756279649547651943183893241334272524767104834109579870413524946558905209958074051583987762096219575194239261987698883253738251263921060411758032712505371005538110033188837023604713044881321049711766211858558604343504967093241764448122802376208609165370654282483731210396273096583045558018185906550329057803676500876855514628135408035736810053026112094992411765071895322935471515968205516872195340410669368924555940531661687754614127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3126e1657212255344c0b215340bae942ff28eca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynafirst.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170474f2c56000004030046304402202591edb857303a84d502a14c23aa310b807f40a1313ff912c2c48fb6de7b0dfb02200778b5ee5fe403cbfc2558177232ad07bbee7cc5056e5caab36fea83bd206832007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170474f2c47000004030047304502207e49625c3f557ead72b44aeb9680c2e93906c93d9327330e1fb3403ded285c78022100fc0a5d18eea2f65bac4791f73e51c2250b66c3b285285071e573e65dfce71be6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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