bionmn.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:9f:29:b2:26:69:31:fb:47:e6:f6:95:11:5a:d1:17:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bionmn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:9f:29:b2:26:69:31:fb:47:e6:f6:95:11:5a:d1:17:49
Serial Number (int): 280604234091666431421121282919811232372553
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:b2:4b:58:bb:c8:aa:1d:41:d6:3f:81:68:89:0d:1e:b9:3c:02:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:81:df:a8:b9:4d:eb:b7:36:8a:9c:f3:1c:d2:65:06:ef:cf:42:81
Fingerprint (sha256): f9:9f:cd:0d:eb:c6:da:61:74:9d:26:17:f7:de:fc:48:25:6a:c7:2f:6f:33:43:0c:37:f9:64:16:92:3b:21:d2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bionmn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bionmn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bionmn.com

Other certificates including the domain name bionmn.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bionmn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9KG3CRqNPrAtP3SmV7js
4jNPgOhV7KysGfyMjYUmvH0JkfLTjCQp/Pjm8rCndwmvaRM/2fIPQUvXU+vHrY3W
XOyGuOK2Bi8R3AM+oFmAh5CHG3TpHnb1PvMFgXM9O3THLdfwg+bdaD4/Tquuv9+U
+WDTMTl3klkMA/RmJ9QA/P8Ne4My+qHloF5mhR6DqlAwxzsCZ0EYszd4KXOJUuEk
G5RhOJ7J79QUC+afBT8LzJ0hiT5v/wMR15xTA0Jo7MR6e+AVv4hOJhpFaaWXMR95
Eqy+SJ58z2Tgu0Uvd3uiQdEy1tkVlTy5K38++Nn+L7F6D7VBc21HKDmP19r6kXlK
8c5a9Q6SIkcndwpGnI70oeTYWPAk96Bi9PuCakns2SBWOH2ZD9leS52Efv/ucwhz
lhf1japtkD6oboTboT0fMynt6W17hrZxpacue2onJx64LdJr3jZ0X6hELIgww3pB
l1GA+vt5GJtC8EWyG9q/kOTBhE/BLX+uM3ddOWFzNOdB6jy1Gc0rKw+qRXDnhf8B
BZjyRG2nMpEzcVnzoy8fHjQue0IJMuXLFZ3DFrXnqkK22Kw7qe9tHxgMHyfzi9e2
SgbGOJlmMhZ+gA6Q7utFSvSVXF9Vz/BzyZ9TEBWxFnje70lx/Sry25PDoLLcrz7D
k8JJ5VYlsVnu7MgtrThIis0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280604234091666431421121282919811232372553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 09:34:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 09:34:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bionmn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 998010260291152454080481311702869150300596933757315666487304254948479438885601984252747227004711642726031050115844711972297275106170544405449339624986297073320726876046813181838275748927895423050493434327856511908475806755685998772831960879780176408880774755722581179739974073837641602194935968080388796332455099857413751708380637583375031746894483097098303850000161498002931785386262066681681326054896349015663531721810193532249924572789158407643685132140612241181139150314166457327951068528649990854141511052613632078086308180255944121561728478850948087370339662099155409692779175382923799846653924710828126258778346859208355080045761388682356084383312677113067140626099902031697220066737211090127497008827339648190857156629123021749699287756064834542957165493867663308902057316218700859593689177621289517334973631070878313825341425097238268840765404386404737001260748848238972047973664274010113275560618100001082285698688025742696527680513519885043687437855130751133671131876994454361260007292542993229434576383682064960560005523380843199896114863219189569207278520387441305264202612464685117047183675748389714652766424630454301659485865667512748972803025970863448795526686336027796890670817311262434713556229578399753861216111309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5b24b58bbc8aa1d41d63f8168890d1eb93c02e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionmn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f5138c2460000040300473045022100aa1e4d2f9843739f0cc78906d72e54aab6eb1a96c0ff8abdbc38d18584e8eb9202200a173b13697700937047897458c526f7a2a9f12d05b4bb5ff23a02d20109a1f70076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f5138c2730000040300473045022100a3a4c45cadf29c9393cab1700f10f6485981b8af54276e6e8e26e4c3601b22e7022079a61e66752e41bafaae1c08bb342033f580890b6aaeda72f01684b11febf022
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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