www.cognac-superstore.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:42:b9:38:a3:05:c0:6e:cb:0c:4a:88:22:e0:01:34:68:a5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.cognac-superstore.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:42:b9:38:a3:05:c0:6e:cb:0c:4a:88:22:e0:01:34:68:a5Serial Number (int): 284041695266395427185675408798138663987365
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3f:56:d7:a8:39:72:5d:26:08:65:8d:b4:0a:c3:68:89:f2:06:11:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5e:30:96:c8:64:9e:a2:12:a3:75:25:7b:2e:3b:7c:3f:6b:a8:9a:43
Fingerprint (sha256): 38:95:a2:a8:89:2c:5e:dc:3b:3a:fd:81:e0:ea:0a:a4:d0:d6:78:cd:9b:db:2f:c6:67:93:4b:4f:7f:38:7d:7d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.cognac-superstore.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cognac-superstore.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cognac-superstore.com
Other certificates including the domain name cognac-superstore.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.cognac-superstore.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgISA0K5OKMFwG7LDEqIIuABNGilMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MzEwNDU1MjlaFw0x OTA4MjkwNDU1MjlaMCQxIjAgBgNVBAMTGXd3dy5jb2duYWMtc3VwZXJzdG9yZS5j b20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDDuMx/tn8ceL3IJAy4 Q+4PHzpzILYKTpPLVmkjlYSEHBWuk6T4ad0lHMrsJ7oLU7NtjU9BKZczN9jgjuh9 a/lMT/3ERlPzMJw6nXFiPNggfAiI6oDuAS0xfV9snxJkdRNEo6JgRVsrQFbbvEQa SGDp0j+2Cx8DjsB8SbDBPqhHQE2t/51KQONUeNydq3gsB/6SfxaVPjlbRrApqvhv aTm2Wo/rYXqehTM0Bjajgz/TAVU21T6IGV/iA3nxOirc3jjWcEE4E/VbdnLVGHpR WoOwYdlKkMzmQ9R3coTkwXrL9543ZsjBApibKBgBTYSHJEAf6y8v98JExzXTwzzR b2aVsJFU4OsRNqh98ivVyU/Cb9F2lfhFupPWCx9C/mSTSZ4w8FL/w7NMAYKBavRf +v/VZmdhCmoUzGYS1bhnKakwJDoHLQAwpyBL+KPY7yusGjLlTdXHZtsVS/KqyOhj tQL6+0Ou7V/Z1Ymnp8VHY4VR+9hKFepgULw3NOoVbmh9YB665n+AwSSFcL5prMFS CNP6QzeqG1BthT2KYTKmINRz7xgueH2+JH91oW/pOBq44w1NpaEKWtzOyHbUa9/z ldiVHEV9G8hXn8HHBdYvpfpSKEr9KIBpTiu8wAItf9bXxPH7qb5lIjzPYNonjN5N OWvYgOaNxHdcKO+UMUiza5s6yQIDAQABo4ICbzCCAmswDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBQ/VteoOXJdJghljbQKw2iJ8gYRATAfBgNVHSMEGDAWgBSoSmpjBH3d uubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6 Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6 Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCQGA1UdEQQdMBuCGXd3dy5j b2duYWMtc3VwZXJzdG9yZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDiaUuuJujpQAnohhu2O4PUPuf+ dIj7pI8okwGd3fHb/gAAAWsMdR04AAAEAwBHMEUCIF198Rfz7tNPKSiqDCNu5pG3 AxGXriskKVunEF85p0WGAiEA1T77Rm9L8fhcMuUcx/z7fQp0DEL01ug0O3hDbFbm F9IAdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWsMdR0rAAAE AwBIMEYCIQDBVLxG3Yx9owBsSQqFjhBIB3D5ZfNDzJcyhSuY8FP3xwIhAKiALp+r fMWrHwt2NfsPZyx8D7VUf9jKHmRLUN5OQSFdMA0GCSqGSIb3DQEBCwUAA4IBAQA0 evYara7r7OdGhp1M9x9EDzFVMCYLA4ZGlkQhxsPbrQIulHVozU7l+My84bhoonvJ TZ+tpctIEx9mEsjJ9HEJJ8ZJIOJSAXvMqUu3/HIF000xoY923H6MqcmNE4jYqfcT D2DLgPd0rwN6qPAGAwaPYy4BnLsLhrdjXU43+Yt+FlZPPpnDYgqXoJVZ9yNsbnaY SBKC8EzIL//Fyaf7dUcn3gxeHLyBa+P8UTSiRxQIlcZEJ+VxOjTTVD9TpPWlo711 LRTclKsZ+WzmzixPvmdyIXZb9y75MF1Ob4DZAKdc1T5lpatzvHcWZGS9m2C2IBLb pC0Qd1R0KDpmJR0dIxpH -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw7jMf7Z/HHi9yCQMuEPu Dx86cyC2Ck6Ty1ZpI5WEhBwVrpOk+GndJRzK7Ce6C1OzbY1PQSmXMzfY4I7ofWv5 TE/9xEZT8zCcOp1xYjzYIHwIiOqA7gEtMX1fbJ8SZHUTRKOiYEVbK0BW27xEGkhg 6dI/tgsfA47AfEmwwT6oR0BNrf+dSkDjVHjcnat4LAf+kn8WlT45W0awKar4b2k5 tlqP62F6noUzNAY2o4M/0wFVNtU+iBlf4gN58Toq3N441nBBOBP1W3Zy1Rh6UVqD sGHZSpDM5kPUd3KE5MF6y/eeN2bIwQKYmygYAU2EhyRAH+svL/fCRMc108M80W9m lbCRVODrETaoffIr1clPwm/RdpX4RbqT1gsfQv5kk0meMPBS/8OzTAGCgWr0X/r/ 1WZnYQpqFMxmEtW4ZympMCQ6By0AMKcgS/ij2O8rrBoy5U3Vx2bbFUvyqsjoY7UC +vtDru1f2dWJp6fFR2OFUfvYShXqYFC8NzTqFW5ofWAeuuZ/gMEkhXC+aazBUgjT +kM3qhtQbYU9imEypiDUc+8YLnh9viR/daFv6TgauOMNTaWhClrczsh21Gvf85XY lRxFfRvIV5/BxwXWL6X6UihK/SiAaU4rvMACLX/W18Tx+6m+ZSI8z2DaJ4zeTTlr 2IDmjcR3XCjvlDFIs2ubOskCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 284041695266395427185675408798138663987365 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 04:55:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 04:55:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cognac-superstore.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798475567580579844831759660637090758985891756694025621156761089532104813234973730772541601291899447465673816886617856479642417104560589634841990914844903782004203843861009907098089025135616695149064758798464001662998416016817130602893142374676557070983107674319590220923769151539372504719457467471861425185003802322166084421242684755058486953064068461907050920756431515324082513696930564931993425902726448572892956563741211299742500518001488656766524106495591772204222341186781487050375638910216456961719172149234708632532270405298485279594125038561053888371387162930514680286178235571824143520580864963866938726727076626718230651495985978016327065417895930501750374595886993118160065213718294366195732808090790469818233839972194105073546156855242669006902122422534733459802569798620616502213352135803687405213481217865721743081642260902241812785054424602857258431149453565913482286251183944619057288882334024365707258393875374542520933949830857702330384165481983878959881532174572188664563608825204664263384487049550961981077949157533948412789077329353733340749286229264682944547500182501399134445164754567388976191331524463048216747367114319792470838714987773114078488378477841445115679633342171156009819152660478840318429664852681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3f56d7a839725d2608658db40ac36889f2061101 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cognac-superstore.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b0c751d38000004030047304502205d7df117f3eed34f2928aa0c236ee691b7031197ae2b24295ba7105f39a74586022100d53efb466f4bf1f85c32e51cc7fcfb7d0a740c42f4d6e8343b78436c56e617d200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b0c751d2b0000040300483046022100c154bc46dd8c7da3006c490a858e10480770f965f343cc9732852b98f053f7c7022100a8802e9fab7cc5ab1f0b7635fb0f672c7c0fb5547fd8ca1e644b50de4e41215d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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