alvaprinting.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:07:0a:91:98:cb:54:df:8b:75:79:12:28:78:be:4a:07:f8 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=alvaprinting.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:07:0a:91:98:cb:54:df:8b:75:79:12:28:78:be:4a:07:f8Serial Number (int): 263732882625765489628158762027173288740856
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c6:84:51:18:0b:33:a0:95:7b:33:29:27:e3:3a:26:26:4a:21:e8:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 42:9f:7d:81:3a:60:ff:f9:10:28:0d:78:27:48:f5:4e:30:29:07:9c
Fingerprint (sha256): 22:f4:90:93:34:e7:89:04:8e:ce:75:d5:9f:51:ba:38:56:b6:71:94:83:3b:45:a0:ea:5e:b0:b5:95:15:53:dc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate alvaprinting.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for alvaprinting.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alvaprinting.com
www.alvaprinting.com
www.alvaprinting.com
Other certificates including the domain name alvaprinting.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for alvaprinting.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgISAwcKkZjLVN+LdXkSKHi+Sgf4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTkxNjMxNTFaFw0y MDA2MTcxNjMxNTFaMBsxGTAXBgNVBAMTEGFsdmFwcmludGluZy5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDE+04BicVCc65HKGedrjqSOfmnyG4j /tb3qhx97e4tN7Xp6hNMcvjipLmOje7n+0nXmfC1OMsCa3MkO4CmLMWgY9JPA08K rkp4/q4hrlZUvUZtKoB3ljc7lK6SBwBxPohIsxP5TEYbVL52BxFHnP2DksH7KZzE cU+XzHeF6hp9zPYSNu5J7WkKHTWuGgAA20kMr2MDxvRk6IOgBSwcHoPin0zcu6bO bgKBxiutgA2j2yuc8vOwIPzxbkt2mygtaeisDQ9lxfAa04xdAryJXf7TPFUt1f/V JkyTeqbnCVLzk0t/+hJ01TN/DdWUi3z87lY1kEOegmQDDveHp4J0RMi4rO+WQh/c USeOb7sp+oZMVsQx8gNqmtX5iOB/Wi6sN/JbL/u3R1He0gbYtmoEyPV10DjS7LWX o0n2IS7tUel1C2XOJFjpFwDMsOuQoD6nKML+sI+Tr5BQgdVu3nlApaxFVk3iZrEq Gz3knyfiVB/zN4Lvm1wnf+64ud467HHFDRaomO5tuHagFvmxDlWWstuoChVGp6zQ cOvUWwaCuqD7ffoRKzc6WVdC3zqtGg7UGzrdX0vKm2+IFppT2t5X3jGldxzaTiyo LWv4/qh5EGu8orKLL1HdvfJJtb3mIAabh1zbLIJZxqcqjsCBWOB+rtCceV5+7UnS LKgAmdnzSduRyQIDAQABo4ICejCCAnYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTG hFEYCzOglXszKSfjOiYmSiHonjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMDEGA1UdEQQqMCiCEGFsdmFwcmludGluZy5j b22CFHd3dy5hbHZhcHJpbnRpbmcuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA5xLysDd+GmL7jskMYYTx 6ns3y1YdESZb8+DzS/JBVG4AAAFw89nvtwAABAMARzBFAiBI/lW43IieRAANQSPR eQAI9H7kg2NfJfQ9rhfdkT0ECQIhAMihOgVoz4OZxF0mJxio/RhB4X+klPvK22/Z K39DHVWmAHUAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFw89nv +QAABAMARjBEAiA6cWUfcG9BIz+ZeRox+ZJVpyFkUwLCAllbKwF/hJxD6wIgehWs hq25FRYsLQPCEO6sRksctZE0UdpjjpQ+w67tOxEwDQYJKoZIhvcNAQELBQADggEB AFRu0qP+epyucrB6hByjkDriZsQeQQHpR8cEEuoRJP7duB8+7Mr1bqSvcopD30Cu VtB+8fEjPoBFxQA55SXFvMaT/v8YpP9LUt5/9rohZT3ek9pt7BDrC9OTDACy5d4a /xhuOzWgUwqD4TlT1XSZjpWQqFNijO9+QLZLWs6MrLi+pgfRr9tnbFyJPZdZCJvP JEA66CmkxNrcv+1zWXvKCBO6PiFU14g8A+El8nqSnsgMczAPoursZ88//4n1glV7 wEJ/KCU0+nsSuSKqHJsXl+loTuxKov3d6ZbVxAeIrV3E4v+cjBy9VKTzZJdvFB45 l8yQ8CE2YvK+JlioIsDxkD8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxPtOAYnFQnOuRyhnna46 kjn5p8huI/7W96ocfe3uLTe16eoTTHL44qS5jo3u5/tJ15nwtTjLAmtzJDuApizF oGPSTwNPCq5KeP6uIa5WVL1GbSqAd5Y3O5SukgcAcT6ISLMT+UxGG1S+dgcRR5z9 g5LB+ymcxHFPl8x3heoafcz2EjbuSe1pCh01rhoAANtJDK9jA8b0ZOiDoAUsHB6D 4p9M3Lumzm4CgcYrrYANo9srnPLzsCD88W5LdpsoLWnorA0PZcXwGtOMXQK8iV3+ 0zxVLdX/1SZMk3qm5wlS85NLf/oSdNUzfw3VlIt8/O5WNZBDnoJkAw73h6eCdETI uKzvlkIf3FEnjm+7KfqGTFbEMfIDaprV+Yjgf1ourDfyWy/7t0dR3tIG2LZqBMj1 ddA40uy1l6NJ9iEu7VHpdQtlziRY6RcAzLDrkKA+pyjC/rCPk6+QUIHVbt55QKWs RVZN4maxKhs95J8n4lQf8zeC75tcJ3/uuLneOuxxxQ0WqJjubbh2oBb5sQ5VlrLb qAoVRqes0HDr1FsGgrqg+336ESs3OllXQt86rRoO1Bs63V9LyptviBaaU9reV94x pXcc2k4sqC1r+P6oeRBrvKKyiy9R3b3ySbW95iAGm4dc2yyCWcanKo7AgVjgfq7Q nHlefu1J0iyoAJnZ80nbkckCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263732882625765489628158762027173288740856 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 16:31:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 16:31:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alvaprinting.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803615056759196962138993114093059561849088912476482821134651404797240018862992978075072977118154675160674120579593223490209055049581213845290177488270096953595038121283122912191488777991764154678574944044992286639525303176939003062496731179494126620841446362845700134553541712498978748791908446318183750784206186743631346123649622237232090976424030976080507895813183261510772707219062567209909953421984860946336273523832759273410830733817631034544866863863125743910558312732580108555918855615837576130191271328806683112444314103475807759100094904705814590682862893233128835311314858367755819760628992350884712820820751512648651816435458055126314268447723932078642586661234809982611230061028413417998207369845789466047787344497190481640431930617318594829259246355020226941382286264470316588066960863062149565835440361839772473932189572511968705089231083412204237084034135558572727377068559738950766844310530849800959907394915114559732159682016556086638565971057294048216849083852054632413829789614828719353986846401148483656833903986816597625381027056034223294000517406606775215349807892929275050509733743037787187987319013312071468747344474312676782412720315129359931141969859238773880292052619920350605940966681556317588229413638601 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c68451180b33a0957b332927e33a26264a21e89e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alvaprinting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alvaprinting.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170f3d9efb70000040300473045022048fe55b8dc889e44000d4123d1790008f47ee483635f25f43dae17dd913d0409022100c8a13a0568cf8399c45d262718a8fd1841e17fa494fbcadb6fd92b7f431d55a600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170f3d9eff9000004030046304402203a71651f706f41233f99791a31f99255a721645302c202595b2b017f849c43eb02207a15ac86adb915162c2d03c210eeac464b1cb5913451da638e943ec3aeed3b11 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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