forum.goldlans.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:39:f8:6c:79:de:4b:66:c8:0b:36:9f:fc:66:01:00:3e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.goldlans.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:39:f8:6c:79:de:4b:66:c8:0b:36:9f:fc:66:01:00:3e
Serial Number (int): 324366151561190654208198131862102966599742
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:b3:31:d6:68:5b:f5:e6:e9:57:39:a4:63:37:26:6d:da:39:87:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:54:4f:e5:e6:6e:87:25:44:fd:ee:b2:ad:56:c6:58:b0:de:9b:51
Fingerprint (sha256): f0:23:ff:19:02:1a:88:e3:60:7f:fe:2f:36:b6:a3:8c:99:75:28:43:cb:92:96:a2:ef:a0:f3:17:2c:4f:31:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate forum.goldlans.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.goldlans.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.goldlans.com

Other certificates including the domain name goldlans.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for forum.goldlans.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324366151561190654208198131862102966599742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-28 20:45:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 20:45:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.goldlans.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 988642318224654184414877704192497868511178792847470324841086505683377506772967288558402594402020814356151406279882198605839426010730443034932775877045655996490045651275514326177607295079432370776178522966470061983417356720094350834179165996046123276112329491266028476945770829372294270894103641129653748026050739336684998966601349104336912754965951361284553418651847960815873859934741304078395205346096157404478471229091710682625915257406565528224623808057649171368278475820124492064699151728914332453838464627301427506145527541758330228073401728628799099705706020612096169978132513498318407100804647494318733223524820092027748284196380200305328193995123962781746542046014701784092932099929427609742315185520590420593365706965347110018150486674348708809710858031748074817110613911537018793503240037300479312994242965846329938440415390024577731539999535839391395230683065889062786874102684931767487569114396366655053067935488320493558273698899401096350239290850840352275380988097931746070111993864067792032146300050607398172832445539908859252076394443878117790999461688027764475172656716542353854414037961999290375397806329346681243324407562153349666536118357847649302599143215975523699844288524399222106786068055857796273519322598699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0db331d6685bf5e6e95739a46337266dda398727
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.goldlans.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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