loca-web.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a0:3f:5f:f7:1e:de:c8:65:81:1e:3c:35:d9:7d:7a:ae:4b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=loca-web.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a0:3f:5f:f7:1e:de:c8:65:81:1e:3c:35:d9:7d:7a:ae:4bSerial Number (int): 315866276146767869516704895743369735220811
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5a:53:39:c4:66:26:c7:e1:49:42:f3:da:cc:1f:61:d8:3f:34:a7:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2f:ab:d4:a6:8b:60:85:a7:53:ee:04:ee:db:d0:d0:62:d5:fb:14:62
Fingerprint (sha256): 26:e3:36:b3:83:36:7d:74:74:97:ed:7c:3f:ee:61:05:d1:22:37:39:14:f7:5c:13:a2:76:8a:83:08:e1:cc:fd
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate loca-web.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for loca-web.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
loca-web.com
Other certificates including the domain name loca-web.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for loca-web.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgISA6A/X/ce3shlgR48Ndl9eq5LMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDQwNDIzNDJaFw0y MDA1MDQwNDIzNDJaMBcxFTATBgNVBAMTDGxvY2Etd2ViLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBALYHqc7EfKm4rnsHM3t2Iy01U70B0BxA/b0h 5fqP+2SohRNcQiFKg5m5pM4LYIwHobzro/bXVF3geCcStg2UPGX0gZdRbdkLVSiM zxKUp4jyEvRfu2qhApjDt/4lxs8nRhqhcVsu9oCCm0YfvKlBZjXhLzWKxLhy+c6i ASEZjqrEzUWFPrclFNNUGKwEm+oLNxEftaaNOuFAt20SSGUJb7hkjGl5HvBFOjLk 8nKbqDBckq15P7bT9dNp1M3Wd5II8j7dfGZiapJnSCdyx71L9dQ6Nu4a4Zr2Y3cJ c5h+RF/l7pG28JAfK01iLasML5yCMLaYBwoOroXcwVYjBNFCupVSGRBnjqFIuP+o e3tA4K+VZ/Dw4xee8Ag7MNSRuINX973p0wOiwjeMdvBUgdYt2CJtSgXiN5PGfsbJ mGJ/V3hsKYrxv3vgYQZBel1Dg7ij5wY/VfdCWT2yFrl060ZFakuqEJakDJYrfi7R aRQVNtFEbow67WzEzamVq+2y0aNrg/Vr8DyqSF/dEWOYm313HlxIJua2cG8mCl3A Zt4dgVoNwSGBTIameVfcIeyXxHSfDP2In0jjJY1k3Mn3t6opQ+KLLGtpoi5aN2WW LQMbpP3FX5B21puAliTjZm+VCVG5GsZy8hyliEXX/JcyGnhK0v+lLlbk8eAsAC1L sxSfZDGrAgMBAAGjggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFpTOcRm JsfhSULz2swfYdg/NKezMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMbG9jYS13ZWIuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw AHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwDqd92wAABAMA SDBGAiEA3/egthuTIGv1/QhOTdqUNGCrG0WSmA7I7pyxNj9o6aYCIQCGsmBz1Go0 SDwJuv2xLuKRyQ/0pM5aLpriGCyRGkB/2QB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ AsEAKQaNsgiaN9kTAAABcA6nfuAAAAQDAEYwRAIgHLLlc+IOEfHBWzLoJPF00Kwl noVWln3l9VIshHvZs90CIFuw6PU6JoJjokGGwSE0AI7AE1u3luOEU/2vHG+s+HIc MA0GCSqGSIb3DQEBCwUAA4IBAQB48kI4t0P8a8enP1ZkPSakr98x1O/iB90GIr6r QrJJDsoVYgWEsfoHl4qRlnCONW0LoUn+aWPIqywLRzyZYBNU9hq0tjAe5as1bQV6 rPfdSzTS9hmEbbIkopX34sxITj6YYZuywXfvv8TpDOmOVK065zkbTPZv0RsaoIuT 21MURmm/rENA7e1BaPF3CoQRMS+xTh4EeZiGb+GVIVMyWQiyt9LSfXFwvOh5TO4p iVFAPPIlvylaE+h4v4hAUakD/DLdJMBqEd6ZSybJFG76OE9dBQXkrw6YwI6ky6yq /ylM+Lt0SWTaauQWSsK4A7dB2+2OakMy+ZV6iEuezJZxLfjG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtgepzsR8qbiuewcze3Yj LTVTvQHQHED9vSHl+o/7ZKiFE1xCIUqDmbmkzgtgjAehvOuj9tdUXeB4JxK2DZQ8 ZfSBl1Ft2QtVKIzPEpSniPIS9F+7aqECmMO3/iXGzydGGqFxWy72gIKbRh+8qUFm NeEvNYrEuHL5zqIBIRmOqsTNRYU+tyUU01QYrASb6gs3ER+1po064UC3bRJIZQlv uGSMaXke8EU6MuTycpuoMFySrXk/ttP102nUzdZ3kgjyPt18ZmJqkmdIJ3LHvUv1 1Do27hrhmvZjdwlzmH5EX+XukbbwkB8rTWItqwwvnIIwtpgHCg6uhdzBViME0UK6 lVIZEGeOoUi4/6h7e0Dgr5Vn8PDjF57wCDsw1JG4g1f3venTA6LCN4x28FSB1i3Y Im1KBeI3k8Z+xsmYYn9XeGwpivG/e+BhBkF6XUODuKPnBj9V90JZPbIWuXTrRkVq S6oQlqQMlit+LtFpFBU20URujDrtbMTNqZWr7bLRo2uD9WvwPKpIX90RY5ibfXce XEgm5rZwbyYKXcBm3h2BWg3BIYFMhqZ5V9wh7JfEdJ8M/YifSOMljWTcyfe3qilD 4ossa2miLlo3ZZYtAxuk/cVfkHbWm4CWJONmb5UJUbkaxnLyHKWIRdf8lzIaeErS /6UuVuTx4CwALUuzFJ9kMasCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315866276146767869516704895743369735220811 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 04:23:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 04:23:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loca-web.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742617343748305858661246225489292903985803878161824632127606758369798271277195361925190828198248219781419452979395634966517728040628800812516265184629639526125297046961465795176526649262366809669930401234725692643882700183675379877233769196148660339950387326410317757893987899755868463046229662160011926265429477831337964643111037212156337480469961358800195213089020329140058855940740562864306812367265203207075022940115341782986965075299217829073437482879766098895984512818837803262452609100239848462235378019945854208733786118595683353403283386454095519358603263480698182184156430054913717289070289838536606866420430516749919098805676154532601987736620460616209505234256661804277419484680496973878292118212341476919821258108527354467296548956218718467294065854098594852873668017444598865704482316719784894602026654901013085662445916828829854756091170941171920915301126767919278066003607915986047039205125070070017574611657949468059505494457789591452081005961348506087147992595671394359258366308981732654399414704786460587244977681981358457878985430578018990468422565704549762117280315300801615784042756092704827360659871083609054165421884113854109233529574430998541501422733843896749372002687195206956775173341622790471375844028843 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a5339c46626c7e14942f3dacc1f61d83f34a7b3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loca-web.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700ea77ddb0000040300483046022100dff7a0b61b93206bf5fd084e4dda943460ab1b4592980ec8ee9cb1363f68e9a602210086b26073d46a34483c09bafdb12ee291c90ff4a4ce5a2e9ae2182c911a407fd90075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001700ea77ee0000004030046304402201cb2e573e20e11f1c15b32e824f174d0ac259e8556967de5f5522c847bd9b3dd02205bb0e8f53a268263a24186c12134008ec0135bb796e38453fdaf1c6facf8721c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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