downstair.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a9:31:2d:69:b7:67:c0:6e:b5:4f:cc:3a:45:6f:0e:c5:72 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=downstair.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:31:2d:69:b7:67:c0:6e:b5:4f:cc:3a:45:6f:0e:c5:72
Serial Number (int): 318909945774255306926307234254712027923826
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:d9:16:63:a3:94:02:3f:ce:7a:7a:88:84:b0:6f:de:b8:b8:e4:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:00:50:d9:76:68:e8:40:89:62:18:2a:83:62:1c:c5:8d:47:9a:2c
Fingerprint (sha256): f7:83:d7:b4:de:eb:b1:b3:0c:07:47:1c:83:7f:bc:dd:5f:90:28:b5:08:df:de:97:9f:98:0e:dc:18:b8:4c:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate downstair.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for downstair.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

downstair.org

Other certificates including the domain name downstair.org

(limited to 100 certificates)
downstair.org
downstair.org
downstair.org
downstair.org
www.downstair.org
www.downstair.org
www.downstair.org
nomiliberi.com
downstair.org
www.risolto.com
downstair.org
downstair.org
www.downstair.org
www.downstair.org
downstair.org
www.downstair.org
downstair.org
downstair.org

Certificate

The complete raw certificate details for downstair.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318909945774255306926307234254712027923826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:53:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 23:53:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'downstair.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 920935014589935520871642181344196780962483666407860829553760339692882904244109441127807007882459084194361629644355020306333446644804411206112049818223969345569339842643903594311938005150235826073204584122051000482198352872765975304379028119300203347186547278382363233169456099633622869678975849713138519363212561453506132511747105546397803837171374634463776821413758435399817702108157554970382108271098194176762182415220247687149081981181625879720152733707082802136786909315521211272763027115144813920073932187405310382444647788009833400410745105765131629928338810512309685436257633626205030317152134175627892127554183187875989152445544518513403799740875700269384340059371948278688257425747484707311652273573051510947474170072790467795283463158350628770854650352765465026431819312852339308132833889424850851825795792025420617614075372252853503235163843757310527593731487196496825038568845301737141094715692227991573286787208301389171832893406090423866728894457114146884458848300831495495904632847198324230117288394134949337152888656734321184496206030632094560524380726084620565012517786053141197368017239178822342075293385265074519363485153525317179348076161017732908007398974711083526458486419359331470946516787763553624918268554217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6d91663a394023fce7a7a8884b06fdeb8b8e46b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downstair.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e0ab48cc00000040300473045022100b91d579773c535dd27e9c4e956aa585ff8a9d233352e523cb69f17e8bd11d183022022c0bfbf5f78f2bb2db3037998af216f62bc184298497a0d5b2aafc42a3a1849007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e0ab48cad0000040300473045022067c8835182def050053b5c5b26a59b0a9ce098dfbd113ef254584e39df0a811d022100ea2d371c1d7273da9f324f341488fb1382eb7ac35bad4be9449ebb55da6f682b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00746063aea7ff7d2f05f189c7bb979efb0ce2731ef474f9ca59c9399564da4a0906d3834c6445799a6183cbfa3fb2b26d83374108e9fb8f3bc4487aa253615e2641de16983cc485589130046b5f1e493527eb170e1d0d491548bc7335cbd6b6a57c9a967d5abffd937932c6eaf1fb8a3fbbf6ad8e0c8d849f2e01d7ca35998fbd853211fd2e07e21bd27e5b6cfaea5ce656fe039f9784b4d145d096cc604453aafaa395593fb1ab456baf44aa532f48a6950812e914e0050f0e0b313f1d8e36db2235224e36d469bf446303b5f93edd85fd9a44a97393819e56c0be8d84f4bf6abc5d61bb11eb0de78b4b5ed85d31e87d782417960744c1ed6d7109a7141dae17