vacmed.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:61:01:2f:4f:de:33:81:23:96:3a:9a:5e:ca:23:f8:87:e8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vacmed.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:01:2f:4f:de:33:81:23:96:3a:9a:5e:ca:23:f8:87:e8
Serial Number (int): 294345822272474857570224806795452274477032
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:b2:0a:33:7a:92:56:4b:b0:8b:6f:a5:02:20:fd:ad:d8:b4:95:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:56:00:a3:ba:db:46:f9:87:9a:4a:60:8e:73:f0:d4:90:32:e6:de
Fingerprint (sha256): ef:81:d3:c9:66:91:7c:ae:92:93:21:11:5d:4f:bb:b7:27:58:e0:cc:ae:46:06:13:9f:92:4b:ef:5b:7c:8d:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vacmed.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vacmed.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vacmed.com

Other certificates including the domain name vacmed.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for vacmed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISA2EBL0/eM4EjljqaXsoj+IfoMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIxMTAwNDFaFw0y
MDAxMTAxMTAwNDFaMBUxEzARBgNVBAMTCnZhY21lZC5jb20wggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDIJ1Cj2pNf57FkaiPTG6htt6l/zhBV1b/gy9S9
Cm6SGsNNDJPODLJTaStfmS3JquxWuheoifLcyjGqRcSTGnlKpTC2RNRwbma/omKf
A5Xk0iY14CZCPNKB/kHitt92XkjnB1rHIn93tR4arxv5nkWcPg/5p1vnDKUa3o3k
xwnNv+3zBdG6fXM7Ym6Iw2Ib3gnfDs3BP+3tKJaOBql+1TTyWFzUgjOawkLXWRZl
eKaeaEtEN1Rn6ORSqbrcnYi9l0dTeloxjGyJ35ymM69AVJNtkV0LG0bgg0uR45Xp
0fvBc0DcJjDV/xYKHpCszk9XghLvtxZfWgwFOG8RAkICnca7gEa0bSo9kelSIT8Y
MqDXpCgpa33oufI1J5xeDycNbzebkGtpWKOFso2VzF/+TIa3yIahqZIF9XnBctbB
xZQNxmX3v7gAbtjcomUN3hm14KoESOAZkSXAKisNMuFuoA6pzausKXYB8jq8g73p
LXlzeE2PWT8ShxuMdITk/JTfna/yz2cdeqRooo5F2Jv0Qj/HTuMp0bJpspVtJebW
HsqLYTKf2GrqqJCHU/1vJMBZr+h8iMAPVMrXFraZN1wB0KNOgU/pdKsb4+OV3llQ
6a5b7IyJiIZkREHxfElrMPaflzColy4brRF55004kYWdZjOUtDXbocSsRAAxPDrN
1ZbJ8QIDAQABo4ICYDCCAlwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQosgozepJW
S7CLb6UCIP2t2LSVAjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCnZhY21lZC5jb20wTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwAp
PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW2/150UAAAEAwBIMEYC
IQCPee2mBGnwRpuNfjoIKCPxv0sFVYvnLS1GFigsaEyVQAIhANSLFVt1WXcpX/5Z
SHc7aqULJViVgMk4C9ZuSmnZAuVNAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp
Bo2yCJo32RMAAAFtv9edrwAABAMARzBFAiAUeFqfix3xeccSoibgCyOfwB0+nR8k
rJZTXjXZB27tBwIhAIr63p4RBhffWu5SR2a8/RFZxtHU/LupJkJQQ9EJDAfhMA0G
CSqGSIb3DQEBCwUAA4IBAQBVRmjlBc45bwE/KmnnGxH0z0ykPrAj+o0Zl/Ji9sVI
73L1OWFrX+qIxDqIQIspMAek7B96E6GlfEyUC3/7C5lOXqBORDRLRz+qOEBrr2qj
TA4987yy2DqjVNKiTsqnniyUnk97sX93W9ATjgWsPc21bzGxYkqg/gGVcDmI8LF9
m7cHgAcVGiii5jL+JrKPYNB3DqJdaN2nHhETlA5fgs1ESsus9Dw1/IqhxaVpts5m
ymMdCPLB09uJqcdPY2VIJoFo3K/f1NImTLdv8XaYCXrjD3Nt5fW5aY/ABc3UCWUD
Zmfjipv8DYXqKEP9d4GiN5Myivj0yWdK0zwcVuIZrJDE
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294345822272474857570224806795452274477032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 11:00:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 11:00:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vacmed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816555341757908083514658995969802263140145770681782437460640947404895425106854755097678441313588964816436301619647121077540368399079982682304268477288371330933589654008261539638816385527314687119013046424855675718151252174522010161311116838345634693599498608573353688439864779984132958613358126160789003050033807008963663387265969847987533860480817586547798387439231020324092305008176951349579890981376588601748612708307982278695512825246313925686068686711574277600779027650428590373341287382366427747237827535581860317356474927682385470863351671870915299387175279206229336718284260008124402122330599564523672998307204620478811634141704064073622907601326613835808357912765440079227146184066012992162035008791384520617097268289442475796414219009127961214346500302578173889408294961977353961706970479792253257284073671000925969338325218443957959351546132789275316465889693879866523992014333335224424028530808457099027729891031205698157146725607525104223435848946204843044717867194295625546803633284812958068788168272425425096738084921831291616709000905646986329457142421897219467930264505556230526166346287024682776665094623412956859818275232056218742762148619191814454157097948823607495452007458515652628192959425188358804966057888241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28b20a337a92564bb08b6fa50220fdadd8b49502
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacmed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbfd79d1400000403004830460221008f79eda60469f0469b8d7e3a082823f1bf4b05558be72d2d4616282c684c9540022100d48b155b755977295ffe5948773b6aa50b25589580c9380bd66e4a69d902e54d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbfd79daf0000040300473045022014785a9f8b1df179c712a226e00b239fc01d3e9d1f24ac96535e35d9076eed070221008afade9e110617df5aee524766bcfd1159c6d1d4fcbba926425043d1090c07e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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