kuba.life

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4b:91:41:1e:f0:3b:3f:ac:01:2e:34:4c:61:6e:8e:e6:7e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kuba.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:91:41:1e:f0:3b:3f:ac:01:2e:34:4c:61:6e:8e:e6:7e
Serial Number (int): 287051111500541125968140160560202077103742
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:14:aa:cd:cc:80:42:63:e3:ca:ea:9e:ed:1d:be:54:fb:63:23:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:b6:c1:d8:28:0e:0f:00:85:31:c9:95:bd:d4:24:08:7e:92:2a:fe
Fingerprint (sha256): 09:4f:57:e8:5e:51:3b:66:45:97:a9:d8:ed:e0:dd:d2:fb:4d:14:85:44:3c:e3:85:57:3c:8a:98:04:11:26:54

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kuba.life

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kuba.life

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kuba.life
www.kuba.life

Other certificates including the domain name kuba.life

(limited to 100 certificates)
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life

Certificate

The complete raw certificate details for kuba.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287051111500541125968140160560202077103742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 22:38:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 22:38:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kuba.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730062731892438774378314539466780658017646078461378991637896088099184457546064952838854148941285889722561081427789766951000037441021929086154058367061638900005304174065728139242697652343982382306112599460845617183573639090060995103232780216586560106159802634052914521571716648602906999157184090296664641579670308936625250635881436867104743680577168420504222126469020871694577547461648442582114609172162465461153942441065486153815173438137488724105200412913317261852614512511419452703557709874602913119368070317776555705486937435524616948878401473040681433301256251201380674177050630662857010344251237428929664855307198936241732934774122528355253028025842719446156097006709515002880466333983601801225228988479027726061818739827502083190378266698596147836366512631971282524658481656350331316772128737571338540931509684026084529295932370072175756778591744315543536485172828187296546267193991969593028074348880035292498809825277358574927945934308334093449661465673362577498064926645531476911843629278837208508604035219933916719384550345893004213944611956199689515175073502396311449278357154714136137642271046901110799089368967824480146125535766954638004158865689471539826332871378876328271566988478957610670080790826228111546047473873361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a914aacdcc804263e3caea9eed1dbe54fb63235e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuba.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuba.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166f5b1070b0000040300483046022100c45a4acf30c4ff9d9b53b486d7a13df553f181ab637f1d7965dd6355b3ffa54f022100f46d20ebaa802ee1fd470a83556719f7f6eb6cddeb83fb2be2321f1a32df9878007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166f5b1075300000403004630440220730a03cd6147b51d56932181de69ca9b4e1add4f6b0f432a2ed8bc9d42d3085f0220302364f24e68ade348c92866d476e075841f5dcc7cef9411dbcf825bd3bcdea8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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