vacmed.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:61:01:2f:4f:de:33:81:23:96:3a:9a:5e:ca:23:f8:87:e8 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=vacmed.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:61:01:2f:4f:de:33:81:23:96:3a:9a:5e:ca:23:f8:87:e8Serial Number (int): 294345822272474857570224806795452274477032
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 28:b2:0a:33:7a:92:56:4b:b0:8b:6f:a5:02:20:fd:ad:d8:b4:95:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): cb:56:00:a3:ba:db:46:f9:87:9a:4a:60:8e:73:f0:d4:90:32:e6:de
Fingerprint (sha256): ef:81:d3:c9:66:91:7c:ae:92:93:21:11:5d:4f:bb:b7:27:58:e0:cc:ae:46:06:13:9f:92:4b:ef:5b:7c:8d:6d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate vacmed.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vacmed.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vacmed.com
Other certificates including the domain name vacmed.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for vacmed.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgISA2EBL0/eM4EjljqaXsoj+IfoMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIxMTAwNDFaFw0y MDAxMTAxMTAwNDFaMBUxEzARBgNVBAMTCnZhY21lZC5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDIJ1Cj2pNf57FkaiPTG6htt6l/zhBV1b/gy9S9 Cm6SGsNNDJPODLJTaStfmS3JquxWuheoifLcyjGqRcSTGnlKpTC2RNRwbma/omKf A5Xk0iY14CZCPNKB/kHitt92XkjnB1rHIn93tR4arxv5nkWcPg/5p1vnDKUa3o3k xwnNv+3zBdG6fXM7Ym6Iw2Ib3gnfDs3BP+3tKJaOBql+1TTyWFzUgjOawkLXWRZl eKaeaEtEN1Rn6ORSqbrcnYi9l0dTeloxjGyJ35ymM69AVJNtkV0LG0bgg0uR45Xp 0fvBc0DcJjDV/xYKHpCszk9XghLvtxZfWgwFOG8RAkICnca7gEa0bSo9kelSIT8Y MqDXpCgpa33oufI1J5xeDycNbzebkGtpWKOFso2VzF/+TIa3yIahqZIF9XnBctbB xZQNxmX3v7gAbtjcomUN3hm14KoESOAZkSXAKisNMuFuoA6pzausKXYB8jq8g73p LXlzeE2PWT8ShxuMdITk/JTfna/yz2cdeqRooo5F2Jv0Qj/HTuMp0bJpspVtJebW HsqLYTKf2GrqqJCHU/1vJMBZr+h8iMAPVMrXFraZN1wB0KNOgU/pdKsb4+OV3llQ 6a5b7IyJiIZkREHxfElrMPaflzColy4brRF55004kYWdZjOUtDXbocSsRAAxPDrN 1ZbJ8QIDAQABo4ICYDCCAlwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQosgozepJW S7CLb6UCIP2t2LSVAjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCnZhY21lZC5jb20wTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwAp PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW2/150UAAAEAwBIMEYC IQCPee2mBGnwRpuNfjoIKCPxv0sFVYvnLS1GFigsaEyVQAIhANSLFVt1WXcpX/5Z SHc7aqULJViVgMk4C9ZuSmnZAuVNAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp Bo2yCJo32RMAAAFtv9edrwAABAMARzBFAiAUeFqfix3xeccSoibgCyOfwB0+nR8k rJZTXjXZB27tBwIhAIr63p4RBhffWu5SR2a8/RFZxtHU/LupJkJQQ9EJDAfhMA0G CSqGSIb3DQEBCwUAA4IBAQBVRmjlBc45bwE/KmnnGxH0z0ykPrAj+o0Zl/Ji9sVI 73L1OWFrX+qIxDqIQIspMAek7B96E6GlfEyUC3/7C5lOXqBORDRLRz+qOEBrr2qj TA4987yy2DqjVNKiTsqnniyUnk97sX93W9ATjgWsPc21bzGxYkqg/gGVcDmI8LF9 m7cHgAcVGiii5jL+JrKPYNB3DqJdaN2nHhETlA5fgs1ESsus9Dw1/IqhxaVpts5m ymMdCPLB09uJqcdPY2VIJoFo3K/f1NImTLdv8XaYCXrjD3Nt5fW5aY/ABc3UCWUD Zmfjipv8DYXqKEP9d4GiN5Myivj0yWdK0zwcVuIZrJDE -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyCdQo9qTX+exZGoj0xuo bbepf84QVdW/4MvUvQpukhrDTQyTzgyyU2krX5ktyarsVroXqIny3MoxqkXEkxp5 SqUwtkTUcG5mv6JinwOV5NImNeAmQjzSgf5B4rbfdl5I5wdaxyJ/d7UeGq8b+Z5F nD4P+adb5wylGt6N5McJzb/t8wXRun1zO2JuiMNiG94J3w7NwT/t7SiWjgapftU0 8lhc1IIzmsJC11kWZXimnmhLRDdUZ+jkUqm63J2IvZdHU3paMYxsid+cpjOvQFST bZFdCxtG4INLkeOV6dH7wXNA3CYw1f8WCh6QrM5PV4IS77cWX1oMBThvEQJCAp3G u4BGtG0qPZHpUiE/GDKg16QoKWt96LnyNSecXg8nDW83m5BraVijhbKNlcxf/kyG t8iGoamSBfV5wXLWwcWUDcZl97+4AG7Y3KJlDd4ZteCqBEjgGZElwCorDTLhbqAO qc2rrCl2AfI6vIO96S15c3hNj1k/EocbjHSE5PyU352v8s9nHXqkaKKORdib9EI/ x07jKdGyabKVbSXm1h7Ki2Eyn9hq6qiQh1P9byTAWa/ofIjAD1TK1xa2mTdcAdCj ToFP6XSrG+Pjld5ZUOmuW+yMiYiGZERB8XxJazD2n5cwqJcuG60ReedNOJGFnWYz lLQ126HErEQAMTw6zdWWyfECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294345822272474857570224806795452274477032 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 11:00:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 11:00:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vacmed.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816555341757908083514658995969802263140145770681782437460640947404895425106854755097678441313588964816436301619647121077540368399079982682304268477288371330933589654008261539638816385527314687119013046424855675718151252174522010161311116838345634693599498608573353688439864779984132958613358126160789003050033807008963663387265969847987533860480817586547798387439231020324092305008176951349579890981376588601748612708307982278695512825246313925686068686711574277600779027650428590373341287382366427747237827535581860317356474927682385470863351671870915299387175279206229336718284260008124402122330599564523672998307204620478811634141704064073622907601326613835808357912765440079227146184066012992162035008791384520617097268289442475796414219009127961214346500302578173889408294961977353961706970479792253257284073671000925969338325218443957959351546132789275316465889693879866523992014333335224424028530808457099027729891031205698157146725607525104223435848946204843044717867194295625546803633284812958068788168272425425096738084921831291616709000905646986329457142421897219467930264505556230526166346287024682776665094623412956859818275232056218742762148619191814454157097948823607495452007458515652628192959425188358804966057888241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 28b20a337a92564bb08b6fa50220fdadd8b49502 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacmed.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbfd79d1400000403004830460221008f79eda60469f0469b8d7e3a082823f1bf4b05558be72d2d4616282c684c9540022100d48b155b755977295ffe5948773b6aa50b25589580c9380bd66e4a69d902e54d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbfd79daf0000040300473045022014785a9f8b1df179c712a226e00b239fc01d3e9d1f24ac96535e35d9076eed070221008afade9e110617df5aee524766bcfd1159c6d1d4fcbba926425043d1090c07e1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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