www.denvercathedral.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:36:c2:57:44:5d:1e:85:66:ec:c6:56:5c:c8:44:9d:be:f3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.denvercathedral.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:c2:57:44:5d:1e:85:66:ec:c6:56:5c:c8:44:9d:be:f3
Serial Number (int): 279970428956601901161858873920725140225779
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:5d:27:c3:51:bf:d8:9a:23:85:7f:77:ab:03:cb:19:48:b6:bc:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:80:37:2c:7d:25:9c:ba:db:09:66:2d:78:94:9a:f7:6c:9e:3d:f7
Fingerprint (sha256): f4:01:1a:53:70:0b:95:c3:7b:9f:6b:53:dd:04:26:58:80:65:77:e3:03:d6:7d:0a:be:bc:fd:d9:ed:8f:b8:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.denvercathedral.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.denvercathedral.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.denvercathedral.org

Other certificates including the domain name denvercathedral.org

(limited to 100 certificates)
www.denvercathedral.org
www.denvercathedral.org
www.denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
www.denvercathedral.org
www.denvercathedral.org
denvercathedral.org
denvercathedral.org
www.denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
www.denvercathedral.org
denvercathedral.org
www.denvercathedral.org
www.denvercathedral.org
www.denvercathedral.org
www.denvercathedral.org
www.denvercathedral.org
denvercathedral.org
www.denvercathedral.org
www.denvercathedral.org
denvercathedral.org
www.denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org
www.denvercathedral.org
denvercathedral.org
www.denvercathedral.org
www.denvercathedral.org
denvercathedral.org
www.denvercathedral.org
www.denvercathedral.org
denvercathedral.org
www.denvercathedral.org
denvercathedral.org
denvercathedral.org
denvercathedral.org

Certificate

The complete raw certificate details for www.denvercathedral.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo2IqLPU67uWadYDscaf
sSP4s8CVLy3HIriUl/0N96ebo9JVGJLpRnOoJJHTGxyhsFx/LLZ7b99KZ6kaG7Ec
7EVApOArCB1IECSbq6F99bFTjJCcMwXB03BIJWxTlxhm9PRjPhwA8mDSpwrIOsKE
Dar1LUXwgGfCJyJwPnkhB+fQu58APgmZryLK174vSDY+sC4hRo0TudnEeRvqe+Mk
jgF1wUupetA2kawerNFSIp5bBd2Fe/MZ19SMcS/Dr72VbDSt8SKJ+oebaj0CFp7p
c2THN5Q3ZuxR/MD0Y38qijXiFs1cf3dPCoErz7ZhcV/ar4bPD4P51P4cGVcA7QyM
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279970428956601901161858873920725140225779
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-08 09:11:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 09:11:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.denvercathedral.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19510491894701885031709335563856656853788773766950779031757259701088796402942648068066746778872324352042917643128262589236229743532771983234483160856223718636885184379081941550889199225252591073147080658726212563291794736678717714709148247900728970109096873063043006702270773631222408319458084065570326073166031392785351213080649870662107608614910551579150686207577805467835451546607383434449306191600687881565853792640792346950366373693001177089924267343880155043417505187716691708378056052512569300963248121773473917646788300249135254289519491212177332971943099241882774496431198879458458673706028252080301467798593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b45d27c351bfd89a23857f77ab03cb1948b6bca0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denvercathedral.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162a4bd401c0000040300483046022100eda2318b1782e7fca5323f3e7f340e0627f9d006f2808ab3dbd38238bd3bdad10221009acb901682e1e9c315652d2d446614004adcb231d2e62a396e1d33a38691d27f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162a4bd403d000004030047304502200583de8931e3dcd5d9b9e70a32d2a80d6e549db05a321aa21d022e3ae4f3889b022100a768f8bb7ade90cbaf4b8679ee2a6b4e05a678907fd885437fdb2045b6403a10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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