chefsskolan.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:c0:25:b5:18:63:d1:23:94:68:31:3e:78:fd:9d:1e:0f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chefsskolan.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:c0:25:b5:18:63:d1:23:94:68:31:3e:78:fd:9d:1e:0f
Serial Number (int): 346662857088738331452718893279566622432783
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:71:f5:55:09:ed:14:2e:4c:85:bb:f8:75:62:c2:f5:35:5d:65:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:5a:9e:0a:32:4b:f0:a8:9b:18:53:92:fd:b3:f2:e6:a9:78:8a:0d
Fingerprint (sha256): 22:33:7d:51:4d:db:54:6a:c9:fa:4e:b0:69:d0:3b:80:59:c4:f6:88:27:dd:f0:49:a1:ef:a4:2c:f6:47:b2:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chefsskolan.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chefsskolan.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chefsskolan.com
www.chefsskolan.com

Other certificates including the domain name chefsskolan.com

(limited to 100 certificates)
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com
chefsskolan.com

Certificate

The complete raw certificate details for chefsskolan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346662857088738331452718893279566622432783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-31 21:05:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 21:05:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chefsskolan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717802623333999884277398952004101013819523917590105059497242552728392777630527617557164302940113563114004635936826286673911198232633989960330897278241393051895263943814687518676339203105716172250151275369064748041286899663714341427814575177071028691581724213635458379866389730245689090764634089520855262743047289216406853424954160005735605497993034816990512927853032390902709510745428208281384793781512480552731432301837686098953571413177200522343158236255614309504261533604063123919307341391536446269364838986317379739522721707789844777362588574484830258133167064511659082511228880209439175388791393621305764443085693286347976678851557017089796220253051965238285719490435687737652213683435204867320911477180665501123659235334703317682220479035089838144319128739875269351451664468162236505742322401036512870901323487312378355689840759323774411741396455899634891374113852899772171452752304974963121404592621611613312264633640214291978363527484896641374154956956303382259206882386475284991556726052671300325977605206964753606494271457717873488657952346586793034096542171960072045762972430930484340001319496532684893680258007394202533745128819262960403166263414818694423316448105200468424247863846548932186158694401899598451974964606771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b271f55509ed142e4c85bbf87562c2f5355d658f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefsskolan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chefsskolan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001659205808a0000040300483046022100b3bb304b0e5850b3069da21c3835426b7e9760a355e26ca725970f5e79bf2930022100f43f3cc5a16dd584c55f691f485cbe4dc88278c86d8ba2832aba6d43e16439b20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165920581290000040300483046022100e6317e72f86a98bdb703536e4ff742d3fc5c4d691c0f4da0585e915c519019b1022100e6def28742f0e5ae41f6db143416fe37cfa2c2bf4910d7d5a903e70d7f1ea35f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006b439d782d92737dcc9ecb1176f0ef030bc2943fc1ee036d36f461c7480d57ed52ea67403e33ec79aa91e9335fc0a9b6503f4769c61c6d9af6a56d0abc12cfe7721eb2f8305ae25545e10b1751368932352a8576d50db4ed7d913f26d061b03b3509708a28a12b16298a66a39bb1f5bfbe778913ad564256fa9882b5bf0cd5cdf612bb650f4c74f0376922fe06929149d502bd264a86596e9c9488c84675d7845f14f77cdc18db3d6ca51a62179a5545cdfbb12c1d5df99266947907223bc9a6405ff10ca54b186a69093134233c279b1d9c13d67d6b85bec928cd5c5ed8289174d3bfe92162e8028177313e2fe14028ff4e407314017a5f986d9ebb6d328658