stasgroup.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:14:7b:19:41:7c:02:da:16:10:6f:b1:61:95:6c:fd:4d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stasgroup.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:14:7b:19:41:7c:02:da:16:10:6f:b1:61:95:6c:fd:4d
Serial Number (int): 295052035845131396167673504591102966824269
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:c5:7d:0b:0d:b6:f0:fa:32:e2:ed:aa:2c:34:32:65:f9:02:26:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:a0:89:a3:03:a7:79:4d:e0:98:45:9e:d1:90:af:d5:7a:7d:a0:d5
Fingerprint (sha256): ec:13:ce:ed:5e:23:b2:f6:09:dd:47:02:42:5a:73:ee:8f:8c:62:e9:c1:db:bc:dd:c6:7d:30:d3:95:91:4f:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stasgroup.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stasgroup.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stasgroup.us
www.stasgroup.us

Other certificates including the domain name stasgroup.us

(limited to 100 certificates)
books.ctpl.in.net
apply.mytgroup.net
careers.maarutinc.com
jobs.greenpointcapital.com
books.bemenderfer.com
apply.mytgroup.net
books.bemenderfer.com
finanza.mzconsultants.eu
stasgroup.us
books.sidestreetmedia.cc
stasgroup.us
jobs.omniventuregroup.com
accounts.kalaakaar.in
clients.logoscorp.com
jobs.rockitdisti.com
books.bemenderfer.com
books.bemenderfer.com
careers.vendeur-afrique.com
books.bemenderfer.com
sistema.soluteclatam.com
books.focustenconsulting.com
books.bemenderfer.com
books.bemenderfer.com
apply.mytgroup.net
accounts.kalaakaar.in
leadership.tazewellproud.com
apply.mytgroup.net
careers.stasgroup.us
books.piggybankmarketing.com
client.clearhue.com
apply.mytgroup.net
apply.mytgroup.net
apply.mytgroup.net
apply.mytgroup.net
books.bemenderfer.com
books.bemenderfer.com
stasgroup.us
careers.stasgroup.us
books.bhent.net
finance.travelelements.co.th
apply.mytgroup.net
books.brandwithsms.com
books.bemenderfer.com
careers.mohawkcomputers.com
books.bemenderfer.com
stasgroup.us
careers.coure-tech.com
apply.mytgroup.net

Certificate

The complete raw certificate details for stasgroup.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295052035845131396167673504591102966824269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 22:01:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 22:01:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stasgroup.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812855442912778613975226488967628723560551469719651770585505609783157141379983539796765871581064465995970388639191161313435991104427795748915274576651447064098089328089557033121897276930755499296649401319442434416770777979266089098853061961939585370084791317144854277244460341016974598811294962468504719382090443211272206047166974766041890431082271579911412384550989640610080267047092130605279486700691452180166550242734493073064895804018172518173896473839507701867059535204867251274879449598550486722822504116983690932178317260341367538895259064495931665227567555495258459956181361363478276570465690008935499134510412377071345857808021164224875961377510996167023527044232185670426628237892156052510230823162374661013086121668735207817467922137820452924149491872962175532971404108439624230731108856959947690614922858493624215815808407271050792565164439581451799044483834873171269153563473931150300469811029220221192719412979180865650809805047705123743747700438314812046510044798575990275887264844563039485852802994099483212824729156861269240607283745222088032598361188237857181121066804253235771710655998952865290541854644716966657814399245648097363575999635273393661970458387397672996206248085360590239622512084336018842635459553337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cc57d0b0db6f0fa32e2edaa2c343265f90226a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stasgroup.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stasgroup.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ae1c6cc47000004030047304502206aa19b9b118a84af8990cbaef624ee48be10a4d62291ec39fe991f136b3ec112022100b68e174cf7b8d5e1781b2d49431483c18ff889a92be7975e0ce85169d149d322007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ae1c6cc52000004030047304502201e41d1c7627064da461c5684782b68556af737adbbe40f4ac0b1ca381829d6e9022100804be13de1e30327889f21347dab72fe27a46e04d173dfad9788d662a278d3bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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