curomatic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ed:c4:7e:2b:d1:8b:3a:2b:a0:fa:0d:8e:a5:69:59:c2:79 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=curomatic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ed:c4:7e:2b:d1:8b:3a:2b:a0:fa:0d:8e:a5:69:59:c2:79
Serial Number (int): 429357248492626808989282756427353052267129
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:c0:40:c4:67:03:32:92:9b:99:11:88:11:ca:21:85:ff:85:da:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:c2:3c:b2:71:fe:0e:f7:6f:6d:3f:30:07:f5:c5:d6:a4:bb:f0:53
Fingerprint (sha256): 27:7c:72:55:2d:f9:8d:df:eb:9f:ca:d1:94:4d:39:b9:07:bc:ca:3c:41:46:70:eb:f5:6f:c3:35:c1:b6:ea:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate curomatic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curomatic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

curomatic.com

Other certificates including the domain name curomatic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for curomatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqCBqBP/Usx2/JD8/XHIn
gu0YhR+SNGa5IwF2cuszwlIwHPPkx/kTBlRm488gdv//aT+tcPD9F4YiCejDoWOW
p4U9/A7fgAwGPNTfgXZz0M6VO9rfKedmDqPV4lnPp++uImf9w7pik5VjaRx4zLPS
k4+rr26eZYFt/kD6IWFY5ffP3Thx+QApixYVIlPO4Cukp4pJR9mAh0UECCkklpFe
2r8UcuE5WATrk6NeYmkS/8Bu5bhMHgLkJPDHC6azJMKjPgClRFpkT6CyZ8pYDpIN
OYsLAyfpygB7BWNZksYcaANd7n1rPxGWvNYA8yUBOD1qGykaXw1xMwowJ3EILh0Z
mXFqxNu1frf6wVi8NwGRMBBtHos83okEdBaj9U/khFeEhNpTSp9NRQni2e7rbVsg
W040znNiMfcc+h8tOq7L4dwu2njAADYg4WPJDmZ753eab+WE7ReOitfZ9Xr5FGy2
jStdyKL0nTGhpDk9O2lRtoAvJD1WxEGr6q0ZGllFlBCz+zb+zEMEMH773RCUjRvg
ZGz1eFGT1vBB/kpoA2ACuNtp7YEKawry8slE1YZX99dnhW+KiKzfM2WfRyRRWYV4
9R0Tjd9ovOPek53gsdg1/tNnfFanKiFM75f6heaekLYG8FHmO5bTgye+bt56nf2v
o4JxXR4gn2KdM4QKVT5Lgf8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429357248492626808989282756427353052267129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 04:37:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 04:37:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curomatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685896758696949967484186316038746306007689497458159281918117675758530157113422457217794283187537842609097959985926818659709839851975917709930168425820603592252740619770933272899608326878935669079511919584428436954231143480054428050387621066785879097801338985316444033879737413949281978897515821701809479105062482132515305380769521164463723350179605701106926111600833639218111725194116408644252651815995039855429304279299341043459340798995758329896696540336699622204877952927415181528703055485801396115795786532546001055561960896548653408974623435440859822576514742601501525295511652249391818120067050856453593732797413363861520816898799020036058260502176530624689278515295068327903547418929763081594491477526035424122578442001847657765799957661349250496026829619764323606019594495632835638439678902094059862881162520040311215608110238778168034412674586728249246495628547921828270545287260686675589906867150541811146206531713857454517535517741949455421757899226367245341209607189376210547634367519071603674338820027291962009506125042329696248932254481587043936151119014479112722231014493601911107139658270362906950109269256462927684019124849874436061089327929970754930515723420047236181405839639909291782904229320802956448993544733183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5c040c4670332929b99118811ca2185ff85dab5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curomatic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ab9fea313000004030048304602210096942719dad578dccd0a3ae523d54ad40cb3e66f6365a12332c96f357b4b04c6022100e8961f128f112bff630e9750a339b5e7029e4b596267e468ee28eba56f7dbb1000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ab9fea3080000040300473045022100e135229d724c91964de261459ff86a7d577ff8570a7fd21b6598c1a5965c19b5022071c48551a30f844e84dc34b0fd4aa0b2569ce80cc7735f70bf43fc175211d2c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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