www.massima.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:23:8f:e2:e9:1b:af:0e:68:03:b0:f9:a4:94:81:74:4f:5b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.massima.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:23:8f:e2:e9:1b:af:0e:68:03:b0:f9:a4:94:81:74:4f:5b
Serial Number (int): 273437998427995633333557864811512726835035
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:d0:e4:a5:c8:62:28:63:23:4f:f7:a3:cf:1e:d7:dc:b8:ce:4d:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:d1:17:7d:6f:82:77:11:1c:96:78:be:23:64:c1:95:c6:12:01:04
Fingerprint (sha256): 0a:48:24:f5:fe:3d:f6:d8:96:19:43:ce:42:65:c9:24:3b:6f:26:85:32:d0:04:aa:2e:0c:9b:63:0c:69:7a:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.massima.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.massima.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.massima.co

Other certificates including the domain name massima.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.massima.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273437998427995633333557864811512726835035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 22:44:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 22:44:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.massima.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 689606516814658497718776586665965309224184324562582655748464519751949848760758456676641199644037547122352936297610249310882559448861532218146646604399153068735389073140581608019845961914938428784081310530713577705570834568662367799010582134343876269629207238422908520136297711957217914501086763980301733283598635106090247733082135609284848732167745389030131733906183018740282009005718831967298580346803563802876909226241585955083310334574566409311686808956808674487971491631004348539678434343439679742741349744694956862326333313609420667179817161814063282921709900000229221127018968671610415990118742454391345419767229029654194922056228706828683447561789628234710589503634305298842300725373181022382199439039219917519935069150442295389044485532012888307658935552098281248378179602237899184404469962232691858139800487559937620484641642433479293086678794719174504198386234338525266739288721160240697185835693575575208551821796829753065436181265234220632598079884542185349055642998675359283316026622887911822831775839724307892086592826505750238760713725794994675146798578079828791557184901476524776144377109856688756430801569629587317507349124728872254956265393344893859465980532456588683041445037870599341907570424438954745876806121499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2dd0e4a5c8622863234ff7a3cf1ed7dcb8ce4d82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massima.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3af8b48a00000403004730450220433d3e14554d76419d84aa9de027adaf69cd0bbb2de8b0f9ea583fce1c91ee8c022100d9c563a093e5e87f778dc9dabb3354377bcf29e8b9a95cc2ae0908f9a8b1c2fe007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3af8b66a0000040300483046022100d593f92c845069af85f7da7dc10820b53b596b4c621dd203384e354eaeedf855022100a164930b405a72a9659ea30b0a776387004c0d61fc87ed8102aed571495a300c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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