brynlee.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e3:3c:72:fb:f7:d5:5e:ef:5f:51:ff:27:e0:cc:48:3b:54 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brynlee.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e3:3c:72:fb:f7:d5:5e:ef:5f:51:ff:27:e0:cc:48:3b:54
Serial Number (int): 425773591730203187449521011446416813865812
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 76:5e:da:1f:fb:0e:bb:e0:2d:1f:99:1d:6a:35:a8:e3:bc:3b:2b:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 56:3f:60:0e:e2:78:5b:e5:77:94:d7:37:b1:ef:48:f5:5a:d6:49:9b
Fingerprint (sha256): ff:9b:57:d4:2e:05:47:2b:0e:9b:81:eb:c2:5c:0b:f9:fe:13:50:31:3f:0b:f2:38:c4:4c:26:07:52:53:b0:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate brynlee.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brynlee.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brynlee.org

Other certificates including the domain name brynlee.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for brynlee.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3X5AztnuhD2EtmJAj6EP
v9+WzctonBaHxWWwpvuXrqkG56y+EKkEGCxviJ2QUUj/pAw81k/08UloQanL7F2u
mU+nt7VSz4I6ySN7mAegpfcEB7Cq+aMETuY//L4f3greiclq03d0Zp9ImxAPcxs2
BNqwBfyXg4HpPQ7MI502lhhcIQEBN+AmBT3PJiZ9VlKxHd3qwaVk7RXft+Uh1BOu
0ZuxMh/I59IMwWEbSDVkw/v5JYzj8EKRLSYXMIckKZouxeFU8bAGsLSizVQwm0gW
MzaiHntXgEbWmI1gpElGFTwAY/dfOjHg88kg+LH+bj2r7JepT2AdHwavS0mjVHhp
YJ0d5f64ZPbQjehwtf/2XY8hSA6EugaBfJXtl1AfMiSbqbUlgqhDy1AeijtmlD8m
+7PYiWNjSpbJFbJkEfxorMdWpXbpJPColVzoNEIwsyDp20ZeJJdOJMwm54v074H9
TXTVFw/I+GTMHhT/o5ckvzWfFU+ELgnbpDeRNq1hCdmus+rZM/yqDyDU2X0umqLb
bgockFDgx1h/7nhUWgK7bMiCv45PLTaiillxJBhMO35VUhbUeOmOb5ZneIvUmgWf
cnS2HO9wOnRoenIBb5yDrUCip/kaBNmlDmEB0b9x1xVqtLcAsdxn6Kw5qo9C+f9G
8244c1VIsUnkfml0Y+3f4mkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425773591730203187449521011446416813865812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 17:59:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 17:59:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brynlee.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903613323173734355175361397779984058009162385226028531962187171130575628634760449628021261196639565706503989758175503920734067827674624309884590813475343967495946906293744304484744372961215671200550814843803722597623640244011936220940470053777526631553119483988902082613800297745795566703631777452599977574348114804820907126671752072358318661808774131796411231514910184018096970972350659361746085206795213946513700953781384827928956681869518145407201833063051141665887749268157089928083164983270591279043277789164317441899532693904154867892072210054500973729476741749163578043353949511803238561289379467659320096654289088876185988957344109791363447306944305746963450023589733140807762910063792615623821857173382122396053531199175766325965138139517806556357552556194031373197289716565487290014792895414798680551628012247138723693153562451075505418877366635367104810499316566343692094084525289532097499181027847993013312057392584184402517681411867490294369914653715433102011375223946643033967432407682514336484194734256059614412791393168079321425741162197278033401691404166703153930651201386006448353792457243629232023146849674710843121386453891358234168412015178289253532484530350409226048056695491125139104533660009038798672462078569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							765eda1ffb0ebbe02d1f991d6a35a8e3bc3b2b87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brynlee.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016de56389600000040300473045022100af4e7c8bf805578c184a7efbf710ff344e2ec3bbcbb249971b42a24296c0b57b022043f85e0465a2014d8d9711d24049183dbc8f7d25f7182b8a3fa367d0b0eb1d86007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016de563894d00000403004830460221009d784916b4e04e02f721745d13e09cff346240a95319275d01102d4880ce68ed022100daa540b293e69571254b422156af0db0f7d165386ce93e74cd1297ccf732b8cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008a495e138cfe72086ba3c6cfa801a2ecda046637125e5bd5d609bad086b73364eb64da0e23b7be98a726816c8eb0e733f09c52bd367c7c8dce6dbb9a6626d076658d5cfab8b71b8ffe74a511e75523a5dc7d2d2651d39e232a97b05803fd6f56156331ae9edd3a2ab492e9ddcda0312e330d0b363b6100928b59fdda7bf2a4e42a8f89d8503d04fc2440fcda00b6f042763fbc1fcfcec1ae72081e4ecdeaab8a670c28b0ba5f1bc121a6ee57bacd53c8790b3b58495054b1ae24b1a7e652e56a1221177dd5e13722ed603c87930f753fe124e85f2c6ab8fda9ef0d660b7ff660b98a209323fac79c244cc6828deffc2abfe00911e6e0e23685781e82ef7601df