Issued by Let's Encrypt Authority X3
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
RSA
4096
SHA256 with RSA
Digital Signature
Key Encipherment
Server Authentication
Client Authentication
8 extensions
No
unhandled critical extensions
This is not a CA certificate
-----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISA5oa3s03PaAd8J9wCEaKVMeaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEyMTUwODE3MDFaFw0x ODAzMTUwODE3MDFaMBQxEjAQBgNVBAMTCWxhcGlhLm5ldDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBALEKLhVj/dh5jgobzAjX0K6LvvMSttwnwPdN15F8 ubmQKC7Iv42EdjRwJEi116bGIPAenV++CV+/wR2rx6IR9bOrxt8eFGoG7IG51wWz 0bcqNtzqxwqAAP6vFfQ6wY2l26OvDnr32NfOdBZMp77jbT8ADLWZr590t5am2eV6 O9IqnKMngTXu2yQroaYZA8S8w1E/fY8FC5IA4qHUghUqF7IvQxo1/5x1fAvGYQwq sBsJXcFGJoa45cj3UhoCaraf5ORks8K83QNwidfVP55SA3NpL7zJ1r+C2ZK3sHeB aqT128CQUV52+7ApYktehlWOAarcRv9kPCU0PxrpB34wrF9vCrqRoDOFzAaARuxp BU3rNicgOkt5Zi8nNFh3vwzf8hRPy4TttvjYV4gXxk1Dfr4sQQrXEb9Pitrd7N7i Npf3VnGg22IadE9DlmlYns+O5iYkDt+hi+Nvlaelm7QYapKlpLtsEphqC7QSV016 L4iNdvlMVbTgqJLGfyh7l4SD8EmCvkfeRDkBPLTJt8bmdRp6VqZNcxBH1e5uSDlF dpUB4XOVhpxkouztjBMUUF+1dvWqPdtGNmywl5VLm6DK6Lbz/Tphpn9rZFjRy8iE MaTp77vjxH8WYAuG7S+Q1terrF+foQmOM/gvHn5lrAuh58IGUQyeSlSzDYBzwpGr 4b3dAgMBAAGjggIYMIICFDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOSFrtt8U2aJ H7ZVzqUPMyWvblAkMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJbGFwaWEubmV0gg13d3cubGFwaWEu bmV0MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j cnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAFUHWqaHirjg yi8edQPJsg/0S+XS7PU3oFhyuka3G3t+6Fm9+MkZM7R5lgZpBvr5r4LJdw4lupM8 KuQn9KNu6E9r3oKqoIYZjzJg1EN6ExqTLMtgi7LjscCK2j/BTcSMCmAwiNnP6LZJ PjbIRaxOftAOwoBAhamgaJLF7OgQQAQfJU4fkSkpBY4/xMJMv32IKTbh4G+gCQJi G5n1oRtkACSMIOnJkOXK4mDA0IyfMlPDal7/w7B9Zv0rmPmp7K9Y/f9kzpW5vGxB ADXX1BebuuoUCOHdY9KXQP8DTXgj/YSkemKNbs8FLXa0r3KkyGNz+IiwUusb+R15 7SJudMgmIBA= -----END CERTIFICATE-----
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsQouFWP92HmOChvMCNfQ rou+8xK23CfA903XkXy5uZAoLsi/jYR2NHAkSLXXpsYg8B6dX74JX7/BHavHohH1 s6vG3x4UagbsgbnXBbPRtyo23OrHCoAA/q8V9DrBjaXbo68OevfY1850FkynvuNt PwAMtZmvn3S3lqbZ5Xo70iqcoyeBNe7bJCuhphkDxLzDUT99jwULkgDiodSCFSoX si9DGjX/nHV8C8ZhDCqwGwldwUYmhrjlyPdSGgJqtp/k5GSzwrzdA3CJ19U/nlID c2kvvMnWv4LZkrewd4FqpPXbwJBRXnb7sCliS16GVY4BqtxG/2Q8JTQ/GukHfjCs X28KupGgM4XMBoBG7GkFTes2JyA6S3lmLyc0WHe/DN/yFE/LhO22+NhXiBfGTUN+ vixBCtcRv0+K2t3s3uI2l/dWcaDbYhp0T0OWaViez47mJiQO36GL42+Vp6WbtBhq kqWku2wSmGoLtBJXTXoviI12+UxVtOCoksZ/KHuXhIPwSYK+R95EOQE8tMm3xuZ1 GnpWpk1zEEfV7m5IOUV2lQHhc5WGnGSi7O2MExRQX7V29ao920Y2bLCXlUuboMro tvP9OmGmf2tkWNHLyIQxpOnvu+PEfxZgC4btL5DW16usX5+hCY4z+C8efmWsC6Hn wgZRDJ5KVLMNgHPCkavhvd0CAwEAAQ== -----END PUBLIC KEY-----
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313776059081168855699654971945192749582234 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-15 08:17:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-15 08:17:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lapia.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722259229857129642367588577172593206915488416720550070194737623667474180365461589580695749257915301400660585332733260630406582768030257333628417945029105759926866013709163868586844156192832193017940700813192688501510986045538662471948589343126607481564779133739534921468926694009377980208017563517748901044948912144005421757459859684371644514245686692836667752444885107634741201918786473809220964670047690530805400949386002674151404376842315919267702818124862267211541752445135219304427891246631119695049456637488207600809479676238076249658670917534428739487264210308071020495311654827110832363773672422897821213802336250870356681365983316429895076765814692648141684716642661083332287745402532122283586706510191950636805557355704460262446626024300201436478123074642591237570131455887560094411516725650560005414208776461760644173957715317975639938227178405327080359113341039836087158505422948229534724103778398992006756096714566177738410873615522635452815213257948034882886147822463465324019800463293696439201913018510870688388765063199129028757463260165582316773206837027400716538999505118461605052648221104362363640766623592281923387515429031073654869636677673943853332107266895938829504463238678084592913781461410504287701400927709 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e485aedb7c5366891fb655cea50f3325af6e5024 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapia.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapia.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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