sanleandroca.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b5:98:40:2a:14:a9:8f:82:08:fc:a1:64:f2:19:30:59:6b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanleandroca.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:98:40:2a:14:a9:8f:82:08:fc:a1:64:f2:19:30:59:6b
Serial Number (int): 323130342023827098329172984511720949045611
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:42:9f:9c:04:3f:eb:b3:01:20:2d:9f:b6:13:75:77:c9:31:77:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:c1:4d:83:6d:d6:db:b5:f7:40:9c:c1:6f:af:c0:e9:bf:d2:d8:df
Fingerprint (sha256): f7:45:da:cf:df:d9:59:5b:53:be:45:b9:c7:fa:7c:83:58:e3:de:10:9f:8e:ff:ba:a7:93:3a:4c:80:8b:2d:71

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sanleandroca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanleandroca.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanleandroca.com

Other certificates including the domain name sanleandroca.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sanleandroca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323130342023827098329172984511720949045611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-19 02:43:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 02:43:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanleandroca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730809153193715299423284988745333703785152542641681472784828394115927947314898164900376815996485710689308205561525569920158205528398244490455332757835403761518293593883288433829454365116141234059015564255442543978245242928114610615281165246171338078863546376541552010529736651677898300059020198638219286698211117570044822858014215207085672414947492706873632576411474903915693632453987139108639725792006744557752648717489238018664935906769130597632221455937311858886876315854723956579678429572598352362612923432730996147532789439160444037434602087212043344233513352066466363353229488100958532979521783321954548110006229907320257486008814013651816517727805226205295718894910222417343014897835358133666194363434763306362282835300964715903757565413635958882423131165624293887437058394414721289530724705709154564217582553714451358541848673421295247778559974148799028999221142349666143616730097113564647934222783019076198985649292300515917620959372874002453334765605414691792864601709150240305951784479561078466847163303197119925149071676867332791360911603881360257485570345189099957064070867752275001605172537633998573431737917997068783872481572153068029590344247494978228791419396282034066524998590389604495415473322462654614699549964353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f429f9c043febb301202d9fb6137577c9317701
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanleandroca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ace304c8a000004030046304402206b58fd75d6bad6c304c0d3f6ad1ff688fd9206620d401abed3370c4b81232392022056e0e0e62bebb6920f24413bb079723e96c7d0b762162ba11bbe109bfa8dd1b200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ace304c7d000004030047304502206b8f3ad0f054d9ab7e209f19afa0c0900f1903e33f8b512c7f50515f6dfee97c022100d06c636b5672675341f54145acf5f4204ecdbac7f65349155ec7bd4d87a62bf5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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