codafish.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:cc:0b:26:ac:9e:7c:05:a1:ff:74:a0:a4:bd:ed:c1:4d was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=codafish.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:cc:0b:26:ac:9e:7c:05:a1:ff:74:a0:a4:bd:ed:c1:4d
Serial Number (int): 284406996789797041169264600316666411073869
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:10:e2:0b:f9:1b:91:cf:40:d7:9c:b6:8e:45:3c:d3:c6:b3:0b:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:3f:ea:07:64:16:7d:93:31:1f:cc:00:f5:63:1b:be:79:ca:51:02
Fingerprint (sha256): 2c:b7:91:74:28:10:38:5d:98:a3:52:61:4e:3f:03:2d:bd:24:67:2d:29:7e:d8:03:79:6b:b6:f6:e9:c4:64:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate codafish.net

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for codafish.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coda.fish
codafish.com
codafish.de
codafish.es
codafish.eu
codafish.net
codafish.org
webmail.codafish.net
www.coda.fish
www.codafish.com
www.codafish.de
www.codafish.es
www.codafish.eu
www.codafish.net
www.codafish.org

Other certificates including the domain name codafish.net

(limited to 100 certificates)
crucible.codafish.net
composer.codafish.net
codafish.net
wiki.codafish.net
deployment.codafish.net
codafish.net
bitbucket.codafish.net
support.codafish.net
wiki.codafish.net
bitbucket.codafish.net
bamboo.codafish.net
support.codafish.net
exchange.codafish.net
deployment.codafish.net
wiki.codafish.net
www.upecajme.com
codafish.net
job-board.job-offensive.client.codafish.net
vacialanevera.codafish.net
crucible.codafish.net
deployment.codafish.net
service.codafish.net
support.codafish.net
composer.codafish.net
oemeta.client.codafish.net
deployment.codafish.net
composer.codafish.net
bitbucket.codafish.net
codafish.net
codafish.net
bitbucket.codafish.net
oemeta.client.codafish.net
starsforfree.client.codafish.net
wiki.codafish.net
bamboo.codafish.net
bitbucket.codafish.net
codafish.net
umfrage.erdbaron.com
codafish.net
forms.wimenetwork.com
analytics.codafish.net
hosting.codafish.net
support.easylogic.nu
oemeta.client.codafish.net
exchange.codafish.net
bamboo.codafish.net
crucible.codafish.net
codafish.net
hosting.codafish.net
new.development.codafish.net
events.netwyl-informatik.ch
bitbucket.codafish.net
failover.codafish.net
crucible.codafish.net
codafish.net
bitbucket.codafish.net
support.codafish.net
development.codafish.net
*.codafish.net
exchange.codafish.net
status.codafish.net
status.codafish.net
crucible.codafish.net
new.development.codafish.net
crucible.codafish.net
failover.codafish.net
etmgroup.support.ignitehospitality.com
composer.codafish.net
codafish.net
job-board.job-offensive.client.codafish.net
hosting.codafish.net
*.codafish.net
codafish.net
oemeta.client.codafish.net
bitbucket.codafish.net
exchange.codafish.net
portal.ezireturns.com
crucible.codafish.net
hosting.codafish.net
codafish.net
service.codafish.net
wiki.codafish.net
wesound.client.codafish.net
bitbucket.codafish.net
portal.ezireturns.com
composer.codafish.net
bamboo.codafish.net
codafish.net
oemeta.client.codafish.net
statistic.codafish.net
oemeta.client.codafish.net
positivomusic.client.codafish.net
expense.dyrtyinc.com
exchange.codafish.net
bamboo.codafish.net
hosting.codafish.net
oemeta.client.codafish.net
books.a2zcloud.com
codafish.net
wiki.codafish.net

Certificate

The complete raw certificate details for codafish.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugIh4aF/2HnBRKmk/27F
dGTiqNehw4i6+fQ2X7M4AS6dQwT0GDCarfGpielwvMqZcUXj9RNFncN9x7c8QKVl
0C0sgku9vAUIcLNMI9KdTcXSmv3OKWXkjLzFOy46zFoxPIiFMGjBNYTeUizt6RcX
72om9O6IavYRdazQ+sJ3TvKWrkWMPv1HaLOKjLN/8xXQCZRMK1FDljijZUFtNULB
EMjTBB/OlU27LO6MMb42CLZTiGbjjC1l4W53hG9eI+SD77TKtgGhS9Hu0i9/yXQU
rNBotHDB5jD5zcTdNN1fxerXNQTZeSlbIVz+j4SehTTHK3ohFo+231MxkyO4Txpg
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284406996789797041169264600316666411073869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 15:33:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 15:33:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'codafish.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23481376224219876711766561551160998577990299392557889495478199847279743873924241674002643022616290298135184153750084110555802761924833012112917614466150749645471323491625401921805333024361899777216622146277956664069192113710544308574896269438288462672031232474512877735555758959411835959533859497770263744044656662878784414675496377978447250971639121087954659937548652196226723230906931488126470047013208906606172530679781172602062879292547953227983873518335598917272822735310330583500282689554957254860949165927352052183262521408273424932297187901548534567968838141688808701260998754263640630379098183856450369642731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd10e20bf91b91cf40d79cb68e453cd3c6b30bf9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coda.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coda.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a6653b01000004030047304502207526bffaaef32b8e6c55b626badc004b63100aabe29945f6b6276a6f3049e3ae022100870e20a262953233085918009edbd49ae4d3b008b6d2c33a1b864075b5cb2c360076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a6653b550000040300473045022100ab4452b8521de14e1037e33ea3ceff03f8c6c590575a2dd9ecc45d9f6156768502207454cff2a70757b70878160a418116abc3ae8583e540b64a04a332cf72114745
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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