chocolatelicorice.com

Issued by R3

About this certificate

This digital certificate with serial number 04:74:6e:2e:3c:30:d2:45:96:17:02:f3:6b:36:7f:6d:2e:7c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chocolatelicorice.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:74:6e:2e:3c:30:d2:45:96:17:02:f3:6b:36:7f:6d:2e:7c
Serial Number (int): 388068353435874285692845793342479517167228
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:22:b0:b2:24:f3:2b:23:09:19:eb:db:ef:2a:75:f8:10:de:6c:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:92:3a:a1:fb:c6:7e:29:f0:da:0e:75:94:f6:86:66:90:5d:9c:ab
Fingerprint (sha256): 12:cd:76:48:a2:58:4c:cf:a0:ba:9b:80:4b:d8:0a:e8:38:e2:fa:2e:11:9d:99:4c:f7:a2:c9:8c:a1:1f:79:19

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chocolatelicorice.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chocolatelicorice.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chocolatelicorice.com

Other certificates including the domain name chocolatelicorice.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for chocolatelicorice.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgISBHRuLjww0kWWFwLzazZ/bS58MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjIyMzM2MThaFw0yMzEwMjAyMzM2MTdaMCAxHjAcBgNVBAMT
FWNob2NvbGF0ZWxpY29yaWNlLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBALlXUc2gWpVchZvOK5TGxrUTHP6A3yuE3DH6JgvPL3NS8oUokVOQ2s9F
dNaKK98R0UbxH4RLSHK83S3f2en40B2ExRwm+diYeCRcmSMtjmWm/CeGtIH+AnqV
hpbDbDQFuFPS5I2c3ju5hhlhAfEmsPNYCefSquPXBCrv8DBFcUefrg8TiI0cX4QZ
lhELceHeh+XCJZ/v9mBHQJbfjMULm2mgJDvKtWuUn/xE2W0zp2WiefIDgBsbLNYk
bWjGVnhsBWtp50VXvsx5c0AC57Kj93nH8AVwodiVOyHvwMhZKfnTIiaN0XKm6vDY
lr5pplxZyyj6/kAHVhcOpnCiK5okkpd/ulD+fvF5jhoVweQqWECZSg2TDUD6RzdR
02hRY5qnc60Mz6/2W+dKtoZIM4iQzQ2DmWg4oqbv2hjjMNJRwsFVAHAYVqOELH1h
97TK67fJDOcMwvUyh0wnOUG7sBmNurBFY7oS8g8O3wOlw7IUFpN3n/gdH+VPg4Ki
8ufKSBVp6Bn1D4luKgngyumeaQpZLxhlf0g73MYa6TfK7HtD57JWHzIjPGEPY9UG
WXVtbNiy6JCyGUa/mfrlgyEHU/NJ2GNeZUJgAwx66Lj9Xdr1TfThFcve+wGIpNo3
hlyrpPgeF2MqX79riYiK25pi2tkwfVxJxoGojWbiF0RR6SQaRScTAgMBAAGjggIY
MIICFDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGwisLIk8ysjCRnr2+8qdfgQ3my8
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCAGA1UdEQQZMBeCFWNob2NvbGF0ZWxp
Y29yaWNlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIE
gfYEgfMA8QB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiYAs
+0IAAAQDAEcwRQIhALqgwcyi5xr9xGXCLLaDS/9ZCMTlXySMerUiMg3UkGIDAiBx
DwMR+s1Qv7Fiu03FFEd5KCWGcTtW8eNou0m13HkzPgB3AOg+0No+9QY1MudXKLyJ
a8kD08vREWvs62nhd31tBr1uAAABiYAs+0cAAAQDAEgwRgIhAMmRXIq2n9aiRUOY
kYctLgiNzvfd9vDFdd6Y1x3gQCpxAiEAzZ7RseRku1APRx/5AXsunnbq0xfpvtET
kufNnawyU7kwDQYJKoZIhvcNAQELBQADggEBAKo/Ba87E1CNFf7+bM/MMZQ0XxcU
Uw3JxHWKi0VVynELqgS5lEZHd/3C17K9CbTMnWCS4KnmNExWcGj0+5TlK9pR370+
BtZk80doVYve/Qy3HqZmJq/OrVL7hYhayWBwIIXqU424ERsCKyYl71Ym25BEOTo7
wRGo1EyhQ94LAOCO2UC6qPo6SZWUEmUmR0U5WY2qUQp+KZ+Pa1kl/45SCty+eddl
DWrfJWHMLQT6ydss9O+lCe+74uzLfoFyFRpo7AV/gyNvIa5Zbcz+VY0gMF0Hicu5
dbzf35FhhrAtLkeHxZwmlq4RNVI469DcpMPQiRa8bKCP6FC9XJa3YEF0/2k=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388068353435874285692845793342479517167228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-22 23:36:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 23:36:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chocolatelicorice.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756125686408446171180972337452587382269773009474534105771071902862446955202887897680614859947760253230110600913259601364832544542483352575526631277318929598743721461683222938266574135476256401704591634596006339381727421569488617769921861152995927391895464916837503270609231154819652094707226956110460162533024896811420461746022292511864179940177011456359795613924460529946032350404137733362124882977989891320802624967073776471192088746818035248699033081486242100224859724190606174123447539187030255812133130139812198852398412588789146320370230432632246750026086187621700193870621193229544895087954651487894819343225023303626234041727181555429649357948011769580459463536755349980941696309879342087442688175770709049524563696984507042656189638660695779053430396221534645318909784965555395487586873163710398770079311866520935842479988182670613567357589856215535761409248542240304425077722393995441133690700708933657269069870329801173248672731663938353722994118778004355102875868525243123133854394425066716726015240048998883651770321134681535656499972117022962801320095060212749998386224420653062591873507214871990558766108859828912625172178639892130535837491218024374067414328455382525679411000803780058550941114935344194071013947156243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c22b0b224f32b230919ebdbef2a75f810de6cbc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolatelicorice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189802cfb420000040300473045022100baa0c1cca2e71afdc465c22cb6834bff5908c4e55f248c7ab522320dd49062030220710f0311facd50bfb162bb4dc5144779282586713b56f1e368bb49b5dc79333e007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189802cfb470000040300483046022100c9915c8ab69fd6a245439891872d2e088dcef7ddf6f0c575de98d71de0402a71022100cd9ed1b1e464bb500f471ff9017b2e9e76ead317e9bed11392e7cd9dac3253b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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