www.dynafirst.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5e:fb:71:b2:73:a4:8f:53:96:e6:f0:c5:11:cb:0f:49:6a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dynafirst.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:fb:71:b2:73:a4:8f:53:96:e6:f0:c5:11:cb:0f:49:6a
Serial Number (int): 293657626861767060776930501600051228264810
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:fb:d3:c2:48:66:bc:3a:dd:11:fe:75:60:bd:ba:11:d4:c2:33:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:f8:40:7a:96:2f:75:6f:0d:30:cb:40:10:92:c4:78:e4:11:9c:f5
Fingerprint (sha256): f1:a7:39:65:99:20:67:20:51:7a:43:91:94:17:1e:1d:69:3c:c5:2e:3b:54:ba:71:37:23:90:53:e1:3f:2d:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.dynafirst.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dynafirst.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dynafirst.com

Other certificates including the domain name dynafirst.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.dynafirst.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293657626861767060776930501600051228264810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 16:39:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 16:39:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dynafirst.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772248520574104636855323182500276493211246789516436013894170101973955954387607393542327416022426853875414492916448508273806113209892722270536870988323853923494958414930308529899892241815252472175097119505987865776030857815071215424291637943620160838356555501669830551750585295093973547665521914685565771736562261839255816085098658318341510463677490250755791543379283146021177521471729062189747732136835965333690284060922340896775959713348511641705752029739901997095260279379492172132713478918797655853135169939841061633745137124166607232714977544858576530534860966822560382097542742711442566972574972752242323305611387146123659550129714986514112227051439281569046661844149496271245249508622941019574288058664183047911165452373568999776977015738744202315079819547608066894806263596715463467690256085933075737146611069221157077400170168813632940899119034484844217653477821533330727407389482821077199971373480500806938969843826659972625452074654802609423802684587357581239319169044731156818417694728629495198669668596425328003713910513515760224661278432192703966244958769523395880348343547574895002190008825182166188226611021989845994543747828936788273098355699786435306166981024096619335351960970305771219390216959460418175230580868571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58fbd3c24866bc3add11fe7560bdba11d4c2332d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynafirst.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017073223e220000040300473045022100c4c6b401f465c6a76f6654c9a2d920a6bd3a6de6c5a36876139069f3c5f2774c0220584af6a47eb7e2b75bec2adf14c62741c936752426c12b9a89308c14ad8ed7240076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017073223eaf000004030047304502206a0df4bd3ae1c7843ef93605546d995db9ba62e0deec2afb5e43fbc6a679554e0221008984131b3e584cbff63d753ecccdd97bc904f38a1f07b9fcdbd72908edc5fa91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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