www.foodstart.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:e1:a3:bf:2b:0c:5a:d6:93:c7:fa:1e:b7:da:ed:6a:16 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.foodstart.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:e1:a3:bf:2b:0c:5a:d6:93:c7:fa:1e:b7:da:ed:6a:16
Serial Number (int): 302810950713504710189583380590876592794134
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:22:a3:c2:a3:66:a0:52:d8:84:88:39:b3:60:46:e9:bf:21:50:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:e0:b7:83:f6:d1:a1:5d:10:0b:b7:3d:d8:6c:5f:01:dd:4b:0d:e5
Fingerprint (sha256): 1d:c1:ad:95:de:d8:a4:b3:99:1c:22:d3:23:cc:c9:1b:f2:68:9a:c6:96:eb:71:5c:a9:c1:ed:07:4d:5e:fd:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.foodstart.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.foodstart.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.foodstart.org

Other certificates including the domain name foodstart.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.foodstart.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu9LJkJ30f5ydWKQ6UUfM
FqBGlLq233GHX98v/ae5Wp5u3In0GpB85nb4JEc4lwmy55NviNJttpqJg7jSRfJx
8bxK1uKqm2xwAwzWkVmLMK3uNRzbX7giVGiyX1u6ATptihq7ksbS3zzzuf8XVTlU
07OMoy4/vDbFaZwZFrWvavokIGIgprfgskEIHQK/N6aGUgGDAgW6Twrr5nd6aCNl
2as285V+HFZOoJhg+CnN+njyOX6x0alVw7skK3OafUjLlgjvsVZ82c+3Ql7dGM8Z
OqkWdFjdg88IFasuvQgtvP8tpPkW5T8rGI5tg7PmCFrFuOMwZtxTgo3eEl/tquOJ
JRenazzPtpzXzc+DXWE1+T6K2w+mndn/A2O/xnWFNQ8aePw4sa2aFRfno0PqX0Ug
woSECEDBnTvxyjxP/iTewQy5sX74tPTos5uxVEvLhw/BLXm8YVWPezwNbpHojbSb
tX4s/7z6Dr5zlDgVIkxfzhXkCrtlEbdzD67SJjgwCn86Nb0l/jl8utgtmGRXeA5C
5ahm2UOX3jEgP7pVNuhiIRcZrwVe4AZ9WlNOM7H6BzEO38z0x5Zji052Ke3GdxEZ
d1vpeZxwZ/YK5UjyfpooXsUNOGAEZhaz0Gm0OEw3t77LZck3NsXbxIg7R0ob9qzs
rDnSZKzmjpg0ovlNO8bKUN0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302810950713504710189583380590876592794134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-22 13:14:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 13:14:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.foodstart.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766252571246298675960539055316996017329091817482407628349515517747676703018893362198535423450118522481598669267283241476781269663454843381928112104869442202520841587368725968086487228616530921968622220827497649041395680673926531594684415564742317986882889491456061352628411904432514087660672062022826914012207287620795271082928451667079553372910045265054141213289649593803730711426918866087446534616213941388189903568607896423073701712499464945490592298441556135663149693074177821359775824650106461575586402050064040914082992218687740893917711515599406056283065962705958206716349935574520017980289172525883170104092482163016913510415805445786516172417263011127390500709692567630648818952066115658770660112955526910026031034682021334556868609035514818198124967258806321077407800838750146612653166746185185848951578579904241035712219395633379779533055488404346065415126305157445323920677392464712308405359672898219544542593747816284597701279266821851677768724517484647952256313613985005428048446269776004575336828607813951765871907854451887313227596761929039766107311812575050100540043740634228838535207851202765271700017122251212124859655847105835379735070614514317905843778756250909951566950157331231819470972929864312917882372247773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d22a3c2a366a052d8848839b36046e9bf21505d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodstart.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c1a08a122000004030047304502202c93293b70b7928dfc9118372918a01c3e82969ef101d00dca4300a6e300f76e022100a2578ac272e3a3038eef62bdc6fbccb711d67bb6c253d75db6f02ad82febc6c5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c1a08a1110000040300473045022100a7f4f8d7000653b8c59bc91f37ce8e603d3fffb8aa9b9d05599b73ed8d03fedb0220400e6353af1a5c68ec1ebeec18a6130388c549e08959102d054ebce5c3a3019f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0069bc61d8e5c2c558dd80c78c08f3735399068b6f7a6a4ce8b6fbb4908597c34092cf7597b7753905ef9ade8f0386481d4ce52daa2767c20bd31a79338ed2ac1f6bc40b2b2f19d371f69448087064e36aa2a93e60338fac45fd73d87c9aaee2fca4eef0b6c72f77212aa600431b48cedfafe47a5bc46a5cbaa0f777d5ad525ca1e3232c691e8303237e1b180da8a044bdc5929220e3b9ed564ff75a9ef2a6d2c448910f62b95d329fb947870224ea5ce2d5bdcfee41be1ba05a99bef836180fe31bf3a99cd178997be517fd2a477104a22f7ede7e13ab7e53b1c2f92a122cac7f99ffbc1d449428532e052896f52b05b17b0602a0f33b810ab099d424672c8f89