rosalba.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:b9:0a:e7:c2:63:3c:9e:00:9b:4b:c7:bb:52:5b:43:1e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rosalba.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:b9:0a:e7:c2:63:3c:9e:00:9b:4b:c7:bb:52:5b:43:1e
Serial Number (int): 296972187757884729193795881306844275884830
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:e4:8e:92:b7:1f:d1:33:0c:d6:05:b1:eb:62:54:20:11:d9:87:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:5a:54:5d:3f:8f:73:31:17:b2:28:26:8c:f0:06:b3:4d:e7:15:2e
Fingerprint (sha256): 2c:a9:be:88:7b:88:31:91:2d:16:11:01:e8:04:b4:f8:e9:1d:0f:de:61:0f:9a:92:2a:a3:f3:fd:07:33:cc:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rosalba.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rosalba.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rosalba.net

Other certificates including the domain name rosalba.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for rosalba.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296972187757884729193795881306844275884830
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 11:20:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 11:20:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rosalba.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778866153525615977139653704653544786444714723474044483003733430829400836364455489123941460270106772829029857954140504860939408704800469726092317405739252343054169964892459160671197821801285454931093298353384295591755248819231788568124384917674240204868760473789418559304578641215505192714375076667410421204460413927669643691346532288485400420413707206822345590094776869929889963969334032467811218816221481303414262593308249118479577630372859958443150117231749852307600857341893649172958725763494518059153731016913984413445379041216850038407015898395283672461064152115865035645943944663426563844185104136283059175616890149564941530306454708434919876516430234587315406035540722506775544075624610709900681930773107591027527839654333615125794151020900189557439827347283096333840521285833128146278178325803394328890489089560435529548604857264779951445760272968313552797579839149856268703284472048880662631838963961900979585951065362939506370287358642401250695691080761807344451150546855258185295032235721700482289149234216991352628312069317596500749786731878776068702520949715582097792352109381771124710478185169406247151864808139964297455699371436531731661320644704753803611872156311858873906931847200612378954879049654850012903988999989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37e48e92b71fd1330cd605b1eb62542011d987c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosalba.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afe62bed20000040300483046022100c623d5b645c48db0cc4606d10cf05615a7bdb2fde3b666bdb0e977b22983430c022100cc7d5b0634effc380dd9ec0022a570a43188a60a2cf8f3acab8575758614f84000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afe62bef20000040300473045022071a549370cdf4533407c79a0c88a7b518bc4da277785d95783832e6022158eff022100a0ca46e1a6adf53b9fa4ef841a108ba0c5f549bd5216a3deb07a044cb63841b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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