www.loca-web.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:97:1c:d2:2e:8c:c7:c8:35:15:ac:de:a9:41:5a:b1:bb:2a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.loca-web.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:97:1c:d2:2e:8c:c7:c8:35:15:ac:de:a9:41:5a:b1:bb:2aSerial Number (int): 312757804910709331953862041388249466911530
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 90:f0:53:4d:b1:56:25:f7:ed:49:fd:67:49:e8:e5:e7:9a:7e:a6:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 13:37:32:78:25:ee:cb:12:52:42:30:38:d8:4b:f5:dc:32:c6:7d:87
Fingerprint (sha256): 16:5b:1d:bf:77:91:36:b8:d9:5a:13:e0:f7:38:e1:d3:31:40:8a:92:ef:45:2d:b1:9e:64:18:57:32:7e:28:61
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.loca-web.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.loca-web.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.loca-web.com
Other certificates including the domain name loca-web.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.loca-web.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISA5cc0i6Mx8g1FazeqUFasbsqMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDEyMjUyMDlaFw0y MDA1MDEyMjUyMDlaMBsxGTAXBgNVBAMTEHd3dy5sb2NhLXdlYi5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQChuNnC1o+hZn/Ip5nzMaUEqAaC6qjF B2adwL/td21ZcBCRyhC/KP6yPVND7sAb+zZSalTGw0bkVbALB2Xu5pj7McwDgQPo AyHPSk5UX08h4hsiNITL7tNxk4pqycpCUgmRjuuiWHIVoj9WwAplE5m24A3EQ2Zu OwfgdMnhOHfapDu87r8c3UNzO/pgioD2NZhE0y82UJqWaMv3lQkwXYOQg9tRs5N0 j/SS7vi2xiyn5hu7QCwk07IzSNSQzfCnfXWkcf5i69QG11YPg+GeEljxbcmxptQs WltRl/tAD+oRjmLtoawp84tRlkSBRHVl2CTBtAxHQwrjFi9YUFUTpIzP9xALzHUk kPDztbhC8iOHUs2Wpj7017v4Bd2psNODav6SO10BHtYStv/5glkiIse744Q9qGyR ySuBw5P+RGzVI35HZdgXI9lJkQhtkwrRuxIHtU4jSq7vgsd6lLDH0Ob/sKmTz2yM nvna0o+bpgWyOhmbhj5fytL3/U9X3Fb2AtgZvNm5DPeYwSFAOi5BX6gz7OEKzQ4s qkpjBeS4Jg2FY/WTb8Inz28w43fthNiWMOPGUFaCpRa7lG6nSavSj5EienigiDR1 xt9rIM3kE+fODdNXmitJ0+56VJf5qFTGyh4UUyJth6c45prmJiUZh5Z2ki7c2yC2 9nsymWFNMX2XxQIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSQ 8FNNsVYl9+1J/WdJ6OXnmn6mXjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5sb2NhLXdlYi5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXAD KznMAAAEAwBHMEUCIQDXH1BVP2RtxZWXyPEmN1dnE2Jo3mLo6h3xLaUyPRrP8AIg PbtfSWn+7J7VYyalwkTfWyHRC9x1smuhubbtRVOcnKMAdgBvU3asMfAxGdiZAKRR Ff93FRwR2QLBACkGjbIImjfZEwAAAXADKzsLAAAEAwBHMEUCIDkRAvAQn2T/6o7N BGX3crJOAAcrbShyAhyZyC9RFpXtAiEAsztlQ1lIX1esa6CQvctw4t8zIzpX9scC MyiiRMrdTsUwDQYJKoZIhvcNAQELBQADggEBAB8srCdRRgkgWRC1wuVts3CUX6Dv Z9yukNdHV/gPVjqqp//3++CAEwqvG9fazvTJc4O2CFjcacKnSZAuN9eDm/uPrxUl IfFvpusbkurftrfgu46pDzikTga5cvMHVUtAGnPVZ/AuBxNcAh1sg8PztWpfZdne g8wkO8Eu4HlaD5RIPypntT7Fa1adF+WFGqQO1DeP3B+87Opm92mprmKvPxL7worA 3kRY0UnV9IquSlrPlKZYUBLZv9BcYD0Ved8zd3YPOBcm3CF6VSx6QFGbwETSfJk7 EqWheYr0fxEDNBR9VPnvv1RrMNOFcfmhDRZ5xU/DnJnoIW1Rto55IJjtYCw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAobjZwtaPoWZ/yKeZ8zGl BKgGguqoxQdmncC/7XdtWXAQkcoQvyj+sj1TQ+7AG/s2UmpUxsNG5FWwCwdl7uaY +zHMA4ED6AMhz0pOVF9PIeIbIjSEy+7TcZOKasnKQlIJkY7rolhyFaI/VsAKZROZ tuANxENmbjsH4HTJ4Th32qQ7vO6/HN1Dczv6YIqA9jWYRNMvNlCalmjL95UJMF2D kIPbUbOTdI/0ku74tsYsp+Ybu0AsJNOyM0jUkM3wp311pHH+YuvUBtdWD4PhnhJY 8W3JsabULFpbUZf7QA/qEY5i7aGsKfOLUZZEgUR1ZdgkwbQMR0MK4xYvWFBVE6SM z/cQC8x1JJDw87W4QvIjh1LNlqY+9Ne7+AXdqbDTg2r+kjtdAR7WErb/+YJZIiLH u+OEPahskckrgcOT/kRs1SN+R2XYFyPZSZEIbZMK0bsSB7VOI0qu74LHepSwx9Dm /7Cpk89sjJ752tKPm6YFsjoZm4Y+X8rS9/1PV9xW9gLYGbzZuQz3mMEhQDouQV+o M+zhCs0OLKpKYwXkuCYNhWP1k2/CJ89vMON37YTYljDjxlBWgqUWu5Rup0mr0o+R Inp4oIg0dcbfayDN5BPnzg3TV5orSdPuelSX+ahUxsoeFFMibYenOOaa5iYlGYeW dpIu3NsgtvZ7MplhTTF9l8UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312757804910709331953862041388249466911530 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 22:52:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 22:52:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.loca-web.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659768494846024507184000988624656634492987765329340228586800057994111323455314875612590995899138313154807969788668799716505599626033583227277293472867694630301121610037848619286497501911486373113663365145451121035224147546379256864178924719265298940549206850223120319294537946413533746558074851280864907645994477476643968754566101863943721800061837303017313729934841099431055519612174754849242540002044424631081907320355404807491880413265596837435372424997658474907155696102291167447801575963051503080104167416875644539639104344240301104726133190079156527164099755034646182746377972393572705450218093029607702303750006171304994189683655803978930564729431106902026563103831394575220616937974637548243309217376581245286667277575329658638509818070742715289236856002794922085616918614204238205741718661383198487586133729226582575156812189107866223992554374073370063783788599283195767297376647307976164368864493625706105425040546887565350071252533855089237404537641687714867933446483294647862617082478870253804005919317858386907860532224898955831895231175256583582674541012922817048875529163453729206491372486207360944361469760184455538955628289261874493052534715416618192423211191589459732116797648803176020285460050160875067453824931781 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 90f0534db15625f7ed49fd6749e8e5e79a7ea65e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loca-web.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170032b39cc0000040300473045022100d71f50553f646dc59597c8f126375767136268de62e8ea1df12da5323d1acff002203dbb5f4969feec9ed56326a5c244df5b21d10bdc75b26ba1b9b6ed45539c9ca30076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170032b3b0b00000403004730450220391102f0109f64ffea8ecd0465f772b24e00072b6d2872021c99c82f511695ed022100b33b654359485f57ac6ba090bdcb70e2df33233a57f6c7023328a244cadd4ec5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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