www.capitani.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:e4:8e:ca:6c:29:65:b5:39:93:ac:fe:0e:20:10:3d:30 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.capitani.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:e4:8e:ca:6c:29:65:b5:39:93:ac:fe:0e:20:10:3d:30
Serial Number (int): 324252618703542483313576814909041291574576
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:9d:f8:b2:8b:01:88:59:20:b9:71:ff:c8:92:6c:33:11:65:b8:5a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:5a:52:d0:aa:23:17:d8:ea:9b:45:6b:ad:fe:96:d8:1f:d0:47:1a
Fingerprint (sha256): 2e:81:e6:6a:71:cf:de:58:d0:e4:1a:56:cc:25:82:b4:4d:75:73:52:ed:75:83:b2:8c:7f:0d:24:09:93:03:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.capitani.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.capitani.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.capitani.net

Other certificates including the domain name capitani.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.capitani.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324252618703542483313576814909041291574576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 22:45:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 22:45:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.capitani.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641370446957692516141208969508640015858224717858874192004528170818594339775243787245250881359470884480608456111079886197436189389403841271073992334912496297096186534975115877611517099362991351203211711393467751040241246716537704505926818337254503804741447643392967986712541093848003770476671475506374466950649578940312963170750474878480711733903148182525754279260437926309688117562520462103316987724184091908179534021775770566729547967353703927094729214024849162218948345103704686851709867692504343901906708805076857066831523864956913956785959970833638477397737754132064583474638297244504157724588732176137264249684862290272551736272200492570379124326841318574927614640984365691517640783268941420336620737698377750133182243431931418704554735759767685546245908617873476541296221598924265979257440597012965464335720936152420062956619999777600425276605512633354226898030782237957989539313960946979628042815254422246359272435468765523857463574476815691308720580770964443311650129860640735052179176614299491547743778605959509043818046730792557119927395961001376103468343130619737699051650196822250047587101636910876090949307921715920118784867418538265766909334333415204208606158839283417540760047929383344743828586815064319090668330471461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b09df8b28b01885920b971ffc8926c331165b85a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitani.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170220b1607000004030047304502207e0256aeb64d26fa5815f08a70e3708ef616e5520a5612ba06ac15f03602d77e02210080aa7b32b3e3df7e26b744b4d7e07e1aa6f50f5f9ff5a9fe2508ec646ce9108f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170220b15f40000040300473045022056188335ea5ad5528688423aae6907e19c58305a39ab33e7cc0129f8792763a2022100d91e428cc431b9d248c6c5d60b3291035e98a843a822af280082317add428bde
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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