www.carvn.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:9f:ae:52:b1:55:e3:e8:93:14:73:a5:67:6a:46:6c:da was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.carvn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:9f:ae:52:b1:55:e3:e8:93:14:73:a5:67:6a:46:6c:da
Serial Number (int): 312251182854691311694473383121233115507930
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:ce:2b:bc:f0:3c:b7:01:bc:f2:e6:db:31:83:f0:9f:e5:e3:3a:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:75:0d:4e:31:76:81:10:97:1a:aa:7b:7b:4b:f2:2e:66:d0:b5:b8
Fingerprint (sha256): 28:f3:95:df:bb:a3:16:9e:a1:f4:ba:db:89:d5:60:b5:f5:fc:82:bb:2d:c8:14:ec:ec:0c:bc:37:c9:82:6c:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.carvn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.carvn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.carvn.com

Other certificates including the domain name carvn.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.carvn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312251182854691311694473383121233115507930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 16:20:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 16:20:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.carvn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674428139954051688880868818254541826318350271560847843674670757084038299782119684958679498555520501728313139133108913764395823824408537342132659677942550779309491643859603001081871552982960173315125225083638594562304365172205672050950278516519860550138820032558191332706933182412117790126340761386525378290834876058666677854668679906163191998085006064143751814684243532327675361771199773761265515071557545912063010500356313855678903212616500287499796319064205887233503624382883338214301150452421298493845347915326471012306863008414021433851310188452030183853315906313730695613492738284138476252824509488844550061879321318781401525117575585736180487828106859254346415702190593837282703256662523085367229848090465791376683798679126512979817421531626484700724035051726014523442652301632204613856231765803519326001729125706401002382685041669934044062571662053367981405328020692196647263087512107945168888264043809657423062027485406892165905852643802040373287059112798279412878185300281654467438950586274917358835858678002401686102424505388198041505682217023038853310121487071109564284880295504146602236802310746161894109019931335666253822552205391167285402920877254282383424689394468862201547512676104109870475270984747888076995552499879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fce2bbcf03cb701bcf2e6db3183f09fe5e33af8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carvn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc0fc1273000004030046304402200ecc96ea8a04b79814edaf588492ff491b463525e67ed1a27047346db59d3a9c022047e202c9387a5f9d051ee963ee3492ea7d6a9cdda39d62dff220f064e05fa2940075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc0fc13530000040300463044022023abdbfba27ed57b4760e36a27e0a8a99722c0c353dffd0de02e628fda461da902201a6b6204f13003927450d6fe24a3ad3a9dcfb973ab6a163182b836533e343848
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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