www.rosalba.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:90:58:99:73:cc:27:7f:14:60:ee:0e:7e:a3:1f:b9:3b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rosalba.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:90:58:99:73:cc:27:7f:14:60:ee:0e:7e:a3:1f:b9:3b
Serial Number (int): 330265764779209979248075783902845472848187
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:65:4d:b6:3a:35:fb:2e:0f:e5:ae:bf:11:94:88:7a:10:2d:33:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:d8:9c:99:ed:b7:d7:32:c4:9f:ca:d9:8e:01:b1:2f:09:ae:10:5d
Fingerprint (sha256): 08:c3:e0:6a:62:5e:72:bf:03:6a:b2:f6:6c:8f:c6:43:82:32:8d:bb:4f:30:67:17:74:d9:4c:6c:0c:22:e7:cc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rosalba.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rosalba.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rosalba.net

Other certificates including the domain name rosalba.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.rosalba.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330265764779209979248075783902845472848187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 22:52:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 22:52:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rosalba.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795242012490084432851109507814111812341548184961357621019872645495707139874437344708612970315267684954154685444911656544036487483932644357887759731747505854202142191404078671178157897538347998192403914240672671957994160282306195609961148044869922600240054341817585250474159150354146813012187336243104786776195598147610341448529063134003871112777101128526352131359449881675697864675292024910245039418732971535667530872423072596489175465619034754495444278788537551447429767527529600337619151625375451285683435490502866297758140039341042664999016506906940958389149118177254530181470929725298934037011932525174135997003550044307106467845563241404210928150043182007423309276559257294937785266895631190642708894949703258009448065516862147112042767637333892726719232413433749397625975857598276636433083157945047018047753042067631773436812041016597356360440332919853920102747747614736434064612440050059809509993326702771983159640689379235820881820341437039587504685570688401572521934340187024464025421269482716718093353290097579337463093856686411915632777794478506220204392590158448461044531308108415010212796716921977063259921520442228853986855974479982151957317672419436292408571379604465659031269482195136477352549774042577894296708220827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91654db63a35fb2e0fe5aebf1194887a102d3390
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosalba.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017036ab6ff90000040300483046022100d7d498b9a26f314b03d4ba3e7da76ba267e58c0d4921be2eed4b3eeb932d5adb022100d2410b25abe0813df3392795a1b3631efc635afadf1065cd4e77de8a1d46a10d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017036ab70270000040300473045022100ed800737df8e88dc96191b3172e1b299aa67fef23e1af7e189951d97512bc69c02203f5ebf0a894e4e771278466f437d60d1085d857ad1adfc73ed861c59cbb10497
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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