www.sierrawestgroup.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ea:21:dc:11:e9:b1:a0:7b:42:7a:12:79:d1:c5:e4:e3:45 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sierrawestgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:21:dc:11:e9:b1:a0:7b:42:7a:12:79:d1:c5:e4:e3:45
Serial Number (int): 341007938847266218261034322001839954125637
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:bf:02:38:06:1d:ca:a1:e5:00:da:0e:1e:a2:be:d2:5b:1d:9e:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:01:36:7e:a4:0f:ac:86:55:34:4f:f4:b6:77:26:fa:62:62:6e:aa
Fingerprint (sha256): f8:5a:5b:ec:f9:39:4f:6e:da:44:88:09:98:7f:ed:9f:68:05:67:21:67:77:78:ad:28:aa:86:e2:0e:1e:4c:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sierrawestgroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sierrawestgroup.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sierrawestgroup.com
www.sierrawestgroup.com

Other certificates including the domain name sierrawestgroup.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sierrawestgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+JFx/Sj3HYeZTvXd5tza
LARTA+fpRMPj5ydNWznpbQqI9KYzAC8iwlhX8OIx02lqfTugZsZlRBibCUBU4jhD
3Pge/PufVa/SMtGgE07bit24Y/YkoFfa2eArPDVNbN2y4AoHnbIqkZFMpp9XiJgO
9HLF3ZSE5IpBtdQrLeyPrDtz/7Pg1SHxiq6XzFdaP5dcYmqhkp5od6YB6ruZP++9
UEC8ATk6IGJ05cKdiekhacXukxcYJz1rnuEDN8q7NcS6Ya6UFUzWJSZ70hntTU1K
3kwAzjN9tBStmRaX25NhycTnmPGq6CsiIN+PCeXiw3sQG/iwCApROdeCwelD4Huk
BuxPPiP5UNxK6CbXepJhHBq31/bu+y4i8ATPkslzN6nVeghWTmHGKdxwAHDTCL+9
M2dG8lqb1NzIf1FziaZSnABlLVS0EWT4JcbiMVPnM6u07KDPLmdJuWGrXYT+GF3g
OpmlKfGixwAKOfB3E2wvRYS70hlVzOBchrNsuQoIZIzRnTW2PVOot8TWo7cS8OGu
IVMir2F33w4n3vgLJvvKYOuIdzrWes+za+QN7tTDKOGkNZBUSs/V7fyaK/8fTHIs
RPaim8eZEMrji3p6s3acnhF9mc3+91mzJib6Nz7mPc1rEi6xeqIDHugg2HLbO7xj
ttrL3VO/YThsw81Mk8bh0CcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341007938847266218261034322001839954125637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 18:53:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 18:53:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sierrawestgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1014069560625132231871828139300394706985506875849960220637473371085671652593367858814031868934116017006853317586073183132273313911262835318648869448864979075035903417715980420473021038561770947273328145950752782864902165988686134299679913014038606369437601542776581817071588374432278631821275185085795221152268495644980026424895763563139489893219352212539127130607979369604918123986289965849343430555707180075281800181625746881264041906128836240226541128499118186105002054630206765725851713097316099336658603214960345663366999065899424179412014315664148372997613861476978262878347897416238690898997416257903028836807200269702021975250138570567735670443223566408195373538376325119787461906059560056542499331462065895252712854503395354298145201086222257078535037283909630330764566338271054350577119101680503655599680278071303675970485251920221066522203043274039472770552103351324195460978865104235937621201426478659275826565582255045520217204700742335966714073408058731941906953293625786113208932431889014239281192324918337128242346219801706081078312574996276252558433626155426853113338447535555514226018830794269496358223058791597924845751790252322077192881424771696532672899894191603733257077379234880264540925925586694475969965707303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cbf0238061dcaa1e500da0e1ea2bed25b1d9e0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierrawestgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sierrawestgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188e4aae2180000040300483046022100a8d625f1b2efd7e11b67d896458f498dfad113ece2b6dcbd8f94f6a4edb4fbd9022100ec43a12eea1481f10cdade66fef36f300c82be6c518986f5388fe879c11eb854007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188e4aae21600000403004830460221008c56308e8d51e432a144a544e57bde715135a278a2acae1d90ae082a8e3485600221008ca520dd35b21a282d4ba6f955e35c1b8ed16feabe33a3c37321b7e61450795c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006aab3f46a711d9aad8e856a903db6dc51216f1f381d883a70ff8189d156ac1b1cf5c1d17d652436f6adc8ea7819f3a38c829d302c1607d60a0dd24819ae1d8e0221f6f5deb70d97d919cc47ad2426df1f18b4a102f848c4f2a11f6247e8e758e9068bad9a34aef901deb2ba14a31c517931cc448a0d040f09323f950281b2f5b2cd54ba7ea5f630d9ccd3478bd86bb8027173704ea98f1c3b58969ae746217f9f3a92e6f1a9ff742f109f76320ba593d290dbe83842563c23618ef078866127d18cd6f9494476d258294ed9fe43cce78a169ae18e27916987a5c7f0a60163e0712328556c44b9b51db09f70cd95dd719dd99fd1a9f0f6f3a2124c77f79444038