www.cheff.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:cc:c9:f9:2e:c9:d0:75:4f:c3:1f:cb:39:ad:06:c1:98 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cheff.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:cc:c9:f9:2e:c9:d0:75:4f:c3:1f:cb:39:ad:06:c1:98
Serial Number (int): 276921775523558604416604163863519326290328
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:e5:45:da:12:58:76:19:97:a5:30:08:07:5a:02:0a:ea:a7:d9:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:77:70:90:bb:4e:27:1e:47:29:4a:55:62:bc:89:97:e6:9b:78:a2
Fingerprint (sha256): 34:84:ad:b6:c6:e8:e3:f1:05:f9:1a:fa:fb:e8:d5:85:f2:52:ab:ad:9d:af:e0:4d:41:1c:dd:58:34:fc:33:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cheff.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cheff.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cheff.com

Other certificates including the domain name cheff.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.cheff.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276921775523558604416604163863519326290328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 22:08:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 22:08:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cheff.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801009669900054924444673236242943053875349713653965838790768832178838516700692975050613417821162280531853998887114312369347127313483102164635346259464629542967952671370958567442925826480705537141489711410351059502303540326132064054169840748134166584996355988238432699544409601114970091219195336443085790910403631065246378556958323876131787630044306412449354721424983286842917410246524933836243923435511466998513084512306049156044857010937709294078408805000540836014691763133085758454671191781729278290253968932219537373239275532997818079498330689711964490292253154213678274243565738241138257554672012460696132509101910058518845512997186952191854895358738067787930235135293880641145703883695124771694507478673478590373210618062075535372540719237226002050886365011511183377655692518924620088216427120076691757642162185928466314669197299179150281179919005796871257683703895070041993774621341831245885244644513976430094504538170815583855582421855010449208305270513908438364631421060551235720616486543480548984016762709674246316780454327366908612136401205065696526330396547943683871564755979518256351680068937744181551951874655541699666072046834152202240228180752885329892288390602252163173161723104300490820532540890257774455127834124501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76e545da1258761997a53008075a020aeaa7d91d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheff.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166d6af7ccc0000040300463044022009d80d62d2bb72f1575ad6e6c6abf8d7b4c758bf23d9c61a5b18cc19fa6abeda02206e4cd9df19036063beee1f980c37f3a9076a12cda333bdc010a915e3c66ed96600770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166d6af7ad70000040300483046022100921de02bc5c370199d08be5b1b04249aa27379252cc30cbf19bb5767fe32efbd022100c7f6d306bb75460e1e127b2b7084059ffbbe7607a5d8ef85c6c4cc0eb290b462
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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