casaisliberais.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e3:31:ea:4c:1d:07:58:eb:80:c5:b9:cf:3e:a2:07:1c:16 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=casaisliberais.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:31:ea:4c:1d:07:58:eb:80:c5:b9:cf:3e:a2:07:1c:16
Serial Number (int): 338647303799355149656608144952321989090326
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:de:4a:a8:5c:a8:b6:3c:c8:fd:0d:c4:af:83:df:33:7a:98:94:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5a:ad:28:55:db:5d:8d:bf:82:de:23:13:09:3c:a6:11:0f:7e:51:de
Fingerprint (sha256): 2f:4a:29:81:2b:ba:b5:96:01:ec:03:c5:b5:66:35:ff:93:19:04:98:00:de:49:42:ae:fa:d1:c7:b6:ac:2f:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate casaisliberais.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for casaisliberais.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

casaisliberais.com

Other certificates including the domain name casaisliberais.com

(limited to 100 certificates)
dunialohan.com
casaisliberais.com
casaisliberais.com
casaisliberais.com
casaisliberais.com
msdwcard.com
casaisliberais.com
casaisliberais.com

Certificate

The complete raw certificate details for casaisliberais.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr/H2vAIF1b+EW4GsTnLP
LLnBzQ+nRbB7yYUWYJMj1ilTgsZdPAWWMwVRbzXMIVmtI3aMGQRjDtOhEowEIC6j
KxwaIaboATDNexjHCrgKnkXR68NS3G92toIuQMOpepz8riZe81TjicAB4J2fo50s
DanFEi3B6+q9l69qvrYu3MoAV4Kppb2cV3V2nK7mI85k7R5QkIxHsnxFmKfu7GTH
I1Anwee/R1KmJlAWxzSykafAHfLdF8iJHVG1/bWrKC8Fpcv8CHOll8Y2972guOik
iRwVzLRnkE1ONikRakT01Yy/ev22eq7wLb1InscdrQ6/ReRQ0+BnpUyHJC5IBiuV
yg0aoBUhr0NcUhlNH/apsCEA04myUPbos961MAzllQWt+ZHptqjXUi2zMamvP55h
D8942WZ3UB/DmuMpIl0drdi2c27NF8FOikfW8QtZcWBFB73QCY5Tk0CKD0YlQzb7
tXI1Kj7Xh4KdxA3dfYd3thcYu9nuuqJRGn+e1+WNpAjzTH+elda6UUMJHVzIYt6Q
O64LZQqrCTpbIW88HHzYXx8HxhfxSs8/bOruQ6nzs/TdBpDgp+pABjoF2gwI5YA8
+n2h3BHHmztOo8mpfNu8she8k3ILaeda0f3X6Un6RnCAMMrRIbzjNuQksB8zCsiK
PLtj47iIInm5wcuGOep41ikCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338647303799355149656608144952321989090326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 07:02:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 07:02:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'casaisliberais.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717793673649369311138377667367785068635691803750670098154066144174583628963937367065331047230728111395670175386773546369990349581714778467110060868470277796164539797898960122380234167300021612931667296979892367026129076391733937012967655023153149010425470240869494146342844213309223547897977364788718108101274651962547065287965064698240065864459233022341637368748552567446073795881288830854252924704353336855352423868951568537254316068078556299152583609505992891965346125810656737165505863634948161290697318813314650222320383199028951762961688143822222197786812619072299544854196001145496686882631231835808304599249677876129983104342613728388028110105381688794644285625364253925546076577652531251963728596502792921923911986575534883565859570967557417328202194903994648389777255690824929623749622805510466859376435616962644015104658301151913953324041212953327044346352166293855814120278402171825736525549576322316662615387127791946634016360364487583418817932270695198282504553642987367784848161762071360869221324496661675834273083214777835052958604755975809878918106930133529528288904273813583304680286558872665521709783282085897243405200745303168661006395595153640676534619366167089973123131305618920959460467995941738385039536215593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27de4aa85ca8b63cc8fd0dc4af83df337a9894f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casaisliberais.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166622658d000000403004730450220069114b34012c31c03ddefab9397fcc0033b200f63632673c2a095cce68650d1022100e55b057e6554238a0af0791c0a81a180bd1e7f1edad350e0342ee9daf168b8aa007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166622659510000040300483046022100c822d7aedff82b948d1546753cc6aacecc6b678884eed09d704b06d9ef47b01a02210080cc8bb94556deeae8ac04e25ce88c8a1384637f4f0cfe7ebb9d97bca2913426
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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