www.capitani.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1e:5e:15:4f:d3:83:90:21:0a:9c:c6:66:3d:7a:28:61:e2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.capitani.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:5e:15:4f:d3:83:90:21:0a:9c:c6:66:3d:7a:28:61:e2
Serial Number (int): 271670386891814922923836311373879949418978
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: df:0f:27:e7:92:0a:df:30:83:fb:9d:a0:0d:7f:ac:2c:f4:b7:ab:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d9:32:f6:bc:de:0f:f5:d6:0a:10:68:e6:60:71:aa:ab:4b:1b:da:ea
Fingerprint (sha256): 2d:86:56:f6:8a:40:e3:93:c0:d8:09:1a:8b:c6:e4:ca:6f:7e:b1:d8:a1:41:80:4a:cd:59:8f:e9:91:b5:f7:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.capitani.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.capitani.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.capitani.net

Other certificates including the domain name capitani.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.capitani.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISAx5eFU/Tg5AhCpzGZj16KGHiMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDkyMDEzMzFaFw0y
MDAzMDgyMDEzMzFaMBsxGTAXBgNVBAMTEHd3dy5jYXBpdGFuaS5uZXQwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC8XjDP1NuKXr1MSEnKkpynOhdsEqux
QRySW+XVhhE2lfVrZ3Cep91xyb+4wgj1HUlNPXmmbpsBWIab+ieGcNRpEjIx06dD
cEQpeVjL9kwgzZJIVsKVp/cdUduUpKRg8FQ+mSiHocoG00wLT8ut/L1Jbntm3ZQR
xgyVRjQiGwRDbzPoeIAbi3zJmeJnrDyQEpeEarNtNufUqf87iOJxm7N54NZrNMnl
gRTFG2JaPxzWIUe0K1vw9QSs/0oCwosCRVU++61KImhqAdbytlONq/kqimJ3sJ6j
FwERUWWvgWJy1BKxb1pOveBbJBtWMjDRpxeNCcHT0souj+Brvnfs3GxclQ1QkY4q
EbsUqUYwwl9Ze8A0OW3d+S3VnHv5FJ2nMGB0gK+PhE4nBb62LXmNb4lxrDTwQh7y
NhQS+tQSpzieeLbiv9nTAY4eezI0zdUaYVznJKcoHogmcT2thIShgMlDxI49rRuA
y8GLA6StC1cDTEZZmHI3Jo6yewV8cJZLOJlC0WwSxtinpM3MjBvsAYXT8rC3PIn5
Bi1ciX46aQiJW3S0ktQAku90JEXiKUwWXYdZxOm7ViGcmwUWSkPxSHcrousmxq8u
VGCb8loFozZiyQaYHY3gdjwiXR7MX2IsMvoy4s5rbzhEDCAYjVZVvL0ru8V289fl
icTgXP2Mo+KigQIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTf
DyfnkgrfMIP7naANf6ws9LerDTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5jYXBpdGFuaS5u
ZXQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQC
BIHzBIHwAO4AdQBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW7s
gpVbAAAEAwBGMEQCIDRPHYixRbt0jp0vJmTLPHWJw73fSbaIR16cc9wGL5YvAiBw
QniQ0DMXBKxXucbot4qIxAsMBIKvW/BvLO/D+hiBAQB1AAe3XBvlfWj/8bDGHSMV
x7rmV3xXlLdq7rxhOhpp06IcAAABbuyClVQAAAQDAEYwRAIgNLHYOiAGXPGZxDYz
Tx8zBResXCJmZbrqiKBX+cuKFngCIGEaks8R8UVN60gxPVTslkwFxmHjpQTn6DfW
d5zYOCOUMA0GCSqGSIb3DQEBCwUAA4IBAQAwHOeGTYMgF4VNog970jx26l7Jo44b
6eSpj2F8+T5RjYjpkp04+mVBD27wOcpAJh7Re522/0uRDwCLYWI3cs4r6SpFDfJQ
asOurxW/MTdhTO1X5H7XoAqFoNKTLs6sRHfPfHd1dN7AZbXILdTI8qdcA1ZbmOQk
lGLAaD79Is6q4JwMEmiIdwNJpoU0s4A6/TjYUNmt7my/S0IQcAdYsspDq3IT+Hpu
vz00GEsf3x6r3hIS8G5fbVGA3QAP1iEhIx34RSQS5co9kCXt+DEOxmy3jJwjIh5r
HHgWV989Jg4rz05Il5UFJv6d70ui3ddG7B//ZD/mK2t2Ah0t4tMu6Cgi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvF4wz9Tbil69TEhJypKc
pzoXbBKrsUEcklvl1YYRNpX1a2dwnqfdccm/uMII9R1JTT15pm6bAViGm/onhnDU
aRIyMdOnQ3BEKXlYy/ZMIM2SSFbClaf3HVHblKSkYPBUPpkoh6HKBtNMC0/Lrfy9
SW57Zt2UEcYMlUY0IhsEQ28z6HiAG4t8yZniZ6w8kBKXhGqzbTbn1Kn/O4jicZuz
eeDWazTJ5YEUxRtiWj8c1iFHtCtb8PUErP9KAsKLAkVVPvutSiJoagHW8rZTjav5
Kopid7CeoxcBEVFlr4FictQSsW9aTr3gWyQbVjIw0acXjQnB09LKLo/ga7537Nxs
XJUNUJGOKhG7FKlGMMJfWXvANDlt3fkt1Zx7+RSdpzBgdICvj4ROJwW+ti15jW+J
caw08EIe8jYUEvrUEqc4nni24r/Z0wGOHnsyNM3VGmFc5ySnKB6IJnE9rYSEoYDJ
Q8SOPa0bgMvBiwOkrQtXA0xGWZhyNyaOsnsFfHCWSziZQtFsEsbYp6TNzIwb7AGF
0/KwtzyJ+QYtXIl+OmkIiVt0tJLUAJLvdCRF4ilMFl2HWcTpu1YhnJsFFkpD8Uh3
K6LrJsavLlRgm/JaBaM2YskGmB2N4HY8Il0ezF9iLDL6MuLOa284RAwgGI1WVby9
K7vFdvPX5YnE4Fz9jKPiooECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271670386891814922923836311373879949418978
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 20:13:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 20:13:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.capitani.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768474117652061100689162109887889222765912455887535835242757324927917855449745776884536665098730631594729566035193854662697399028999895231351869293524104918104289595128087625392079750523243619985716688761181651325454166121228548618265206049518500789381113756721683833051220161281489270668238268757303487461600226633443315947465868468110430240486954906472709415906950879483536239464499378102969548626623943997783952094981053209019909650125687962732723111422444678158869569310131763849874107740801649042680691671878873757030109875379810191819357676956630057763036906963405907628999538151678666597724560753215570315065160958068117033638057448302561753681546956141647678320471449398575264225883612332916329939013468194804911773562782019004390748718150506951448886254765048551527912205532554729376422290503456740369600754182397476536772462441011008261026341859978338811653895964996261163176222455887500393613566062284004112794539031752535945336811137429825612104089069039923716592694561148509186339878876856974337810584751852256866372835511343658545443548194479177373480823236741059609479021356676899088408642756788217535992230666858813140752085913401237262325416439774862050184109399911628639197513384375528479330397554634219577816556161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df0f27e7920adf3083fb9da00d7fac2cf4b7ab0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitani.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eec82955b00000403004630440220344f1d88b145bb748e9d2f2664cb3c7589c3bddf49b688475e9c73dc062f962f022070427890d0331704ac57b9c6e8b78a88c40b0c0482af5bf06f2cefc3fa18810100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eec8295540000040300463044022034b1d83a20065cf199c436334f1f330517ac5c226665baea88a057f9cb8a16780220611a92cf11f1454deb48313d54ec964c05c661e3a504e7e837d6779cd8382394
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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