aprissa.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:7c:e3:32:b7:0e:16:d0:c9:eb:55:21:ca:92:bb:b8:2d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aprissa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:7c:e3:32:b7:0e:16:d0:c9:eb:55:21:ca:92:bb:b8:2d
Serial Number (int): 307781263648016182240178800439072743209005
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:06:14:d7:ee:b0:b7:30:46:42:60:b7:e7:d9:fb:77:98:12:1c:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:13:ba:77:cf:6e:12:75:9a:3c:a7:f4:18:24:8c:56:ee:72:9c:ba
Fingerprint (sha256): 15:2c:50:13:99:1a:09:12:f2:b5:0b:0e:8c:76:9c:e9:eb:dc:ef:85:73:9d:9a:bd:5b:8f:d2:4f:c0:7a:28:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aprissa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aprissa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aprissa.com

Other certificates including the domain name aprissa.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aprissa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307781263648016182240178800439072743209005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-10 09:05:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 09:05:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aprissa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 972998853393742847715124234717964703673117846816399354178398506890677901512894614639692695830748377848414094338650360533158042116998228977771469157821918183465031020623775748117433323266715046391874243628209735932280506308357011622783417484892834023612836186694634849590358850455255987294045787670957660609451566565543899428485565695893521252185949783416431068063059244312435158762201636823797452701666853403409400397958291434090291860434115630826695115172517969226213847743995969082694653827652246372423228698760216158310471205409648626984389922889741418015341852917997910066331288399337170916214056012992051035315828495783281014130292292923790388756238694237463299387199327065729183089608518633549868757331164294175651320008370433319010564644454617422897157079574714778776779291190517499657513779597825144290324733001323133073237544326817092420464514592183123005766384462815575367835109077728112243752548101745274363941662685153160071808669048751233679346567740120599026136675729808579488519816572401550137250843357800408986169896569577614428603164747058024933910065067578071099341355416038231302319449845886387466499723826343527789035720728043319324668890374569820342291515228584055453351634702362149915562363297830074541334982563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d0614d7eeb0b730464260b7e7d9fb7798121c61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprissa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a06b5e8d60000040300483046022100b5710c3eac0f62058227b1eb53b9159d105129ada6cac4995c34a2531f51e80e022100b1c8d54a8c74401dab33b415aeeff120da471b92bc429e4e39aadd0d99e4d34d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a06b5eac7000004030047304502210088559a66d29aacccc6690d0cb57dbbf643549c0370b36ec259002f34733a7d4602205a947be3178e41e4b7d39fece619ac5c2d497b7e8b0a2b22060e49a6b00673b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0047c04a39c24fcc680dbaef5e1e4c556ada32ac4d9cc2ba1b8783b0fcc916f7cac6c66b80092eb6d98c00e8bbd9c43bb77b1e16730fb9e49c8824127d3db2ebdf4dbcd556da77b7c9bf384c0b5827df2635bf52f95fe4c1f362db836710f6efe69e5e0cf5d10657c0b73c5e305fd1f175e2226c6230a178a3f87365b6b5216c493fe0a129be08caaf1d1f54f3900d9ced3f90fbeb1505765c08c082766467b74f9b2dc5956ab9ad9debd5ec9e3c8237d83c06d512c449190be633c43849f5fc2e390dd80d52e731398fdbf2fc9743d623b59554e2bae1c40fc57e5af338c91847d87028707a2ee7cf0d073632dc50be923238fd466e914c1c18c078058c56f8ce