kalmanfamily.com

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:f4:0a:94:e6:5b:3b:90:eb:93:ab:dd:01:07:a0:35:53:c4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kalmanfamily.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f4:0a:94:e6:5b:3b:90:eb:93:ab:dd:01:07:a0:35:53:c4
Serial Number (int): 170155248872544550486965279303364381070276
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: e3:f1:71:b2:a5:78:cc:0a:75:24:2e:6c:46:5b:dc:9d:42:49:e4:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:18:f2:7c:57:39:e9:9d:16:ca:8d:47:31:66:16:c3:f8:23:36:9b
Fingerprint (sha256): 10:07:47:33:f2:85:7d:5c:48:25:8e:2f:cf:a6:b9:ce:e7:71:59:46:f0:a4:49:f4:72:ed:b1:5b:4a:ae:d6:3f

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate kalmanfamily.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kalmanfamily.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kalmanfamily.com

Other certificates including the domain name kalmanfamily.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kalmanfamily.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgISAfQKlOZbO5Drk6vdAQegNVPEMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAzMDExNDI1MDBaFw0x
NjA1MzAxNDI1MDBaMBsxGTAXBgNVBAMTEGthbG1hbmZhbWlseS5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCfOgyetzC5JcqmVOxkhyg6aUJelpks
dFgRzRipUc2sO4Ahb/yZU7flJGrzxO9zO09bgXHVgyqe6i/rsg9WrO1kMuTXCKsq
0MMkOrYAdEYo7pUu1IJ3UBfUu/aWxA1wA2Xrc0MRR3GG1l2k+I6yI9rxyEtXckA7
5DtY8rXw0oeY0NAh5WJHm4IKmSi5U1WXFEfcJPf3pdDcg4iyOI2GJ/7vwVUdeKYi
TTi2A+VIDP1xI0sTq4Nd0CkZKqEMEMJYO1UQuHH/om1b3pnWHAfYpxS3KtzponOl
7sJhYEq9lgP+C4I8U/QJ6V8wLl2R5Su2WPPeeiUkwDDK1SuvkVO1uIHvev5bfBRC
Z5Oo42VwLNiiS78MK6ct/Gf3ONAhHvIf+4CVJ0O5MCyYSVa6D0pWo7gxfORam1R2
KI1QyeYfOMJAd/8HgLVVe5jBBWn04s9IReywXsIxu1EDzBZfUPoyWiI6kaFJOwZi
ddOaFKWHCCDqlgDSdOJ6IiA6ItvZLNq+Hz6M6kQ0btkojw8T22DoSmde5nTZwc06
QyzNjd7w2CDWWo5u3Us9AIu2Tzm432EwTry7suN1VxofoYNk3xe/LGdPcBYTRJbD
zSDapMcXKiBQhco1781p/poHvMswer+aZZ7KFF8Ep++rnMMFtBblpX0LpWbrUXbw
n7mM8G+QtQwYZwIDAQABo4ICETCCAg0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTj
8XGypXjMCnUkLmxGW9ydQknkkDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmlu
dC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDEubGV0c2VuY3J5cHQub3JnLzAbBgNVHREEFDASghBrYWxtYW5mYW1pbHku
Y29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF
BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv
biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo
IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j
cnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAB32jPgD2uE2
XTT2FQ1hDYjjulHTbyEchBeBFxpCsJxrJpUg5Eer8ktqC1lXalxVvof0W1A2qbBr
V4fzagbQRs38aq0KsvIFaKF7hWxwc0GQAQAXcBrwQr/7QxC0MrDlQ3v0/YVJ3HX2
V8AxvK31mfIlHMMJNIETlf8pxu/P++dPb6vlhRLXJobHTf4o8NsVPsfUAFYXAAuM
6p4CUe6HHwsn+t0c8cT3VmZbLLk1QlSVYVZ+5tBPUY/mmQtFdfo2EpR68OrM3ojC
3k2Lg/rUkT3d935OZoTEe9Fj7cxrG3HKf7Y0zLQiG9R2RjNMjj+hL3JJlpjieVSF
5VcMeEjFwBg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 170155248872544550486965279303364381070276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-01 14:25:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-30 14:25:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kalmanfamily.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 649588486773692903857438909952192329423150444244406273556741893105459203946390596989251736806375231776265893083094912785367063741046692435422994016827411658769736300584401811266554901186879250129620567319246168935268308501865802695325183192893953162888730974091978226165367861398053592886654910173951669669369368784043950470253383555821465294986519511845758360307963746387093779908004981608021332312213671222165174273256325451535085325100451154757402891114685545065405029394078887558862619700725405936326604865558335179787047553573794405681593620835578322108689635388378361005502017633728327194261306697857622455799071950141344215701309597309643884168937769103532786796002534486609870015838588546886919123790296379955161396031801798589952320962769179623568125460885384548414161019674739406326608077428816326240897460881948443042876422315814334877775033324489436207303744649120607745086561765866942929013310746351712538136426153471247839111367138962209620679368421963273275745479130484649937484896460372970356411572809790511783950212606041544046536009882545646664011076897041127440772638568149531835373637444156066853121831334653982619831172533083613065137930744896671505858263781213298217866259157990343322338054253023797920662296679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3f171b2a578cc0a75242e6c465bdc9d4249e490
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalmanfamily.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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