chefigata.com

Issued by R3

About this certificate

This digital certificate with serial number 04:16:52:b5:7e:9e:f9:29:7e:d3:68:b5:07:a2:50:25:5f:2a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=chefigata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:52:b5:7e:9e:f9:29:7e:d3:68:b5:07:a2:50:25:5f:2a
Serial Number (int): 356045294868866162357755058237722818076458
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f7:6c:08:49:45:43:e9:88:b5:c6:8d:d1:ac:d7:49:21:47:46:e8:90
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:09:16:17:d4:8c:24:78:6f:78:2f:e5:2a:b1:69:1e:0e:eb:b5:17
Fingerprint (sha256): 39:8f:6f:65:cc:35:78:28:2a:a8:81:6b:49:8b:fd:37:9f:08:6b:bd:be:5b:59:3b:a5:76:9d:86:97:8d:92:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chefigata.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chefigata.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chefigata.com

Other certificates including the domain name chefigata.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for chefigata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyChVbSnUkIUWtNYalGbF
GjFRnFjZquk3uSFnNEIDm4o9D09aXAOaK7oe37Ye05VF2puL+C3YVD5pQWzot0ZX
+GYlCCpl1sEG+oSvYeq9Nx17U++ESA742ZQ4o9pkOAVClxGacJfrQ6RgYeS9dZsk
NPiplLukaS/894mtsdm7IZxe03DbjX6cKMT6V62NPHgV+bQqXjY71W+52Wf4I8hZ
B5epGxiLzKAUl81YeGOKt1+v8BTT0EhyRxVp+Jqb90UwtjXHBjh9j1n95rwaA6Ca
7TOAju2LtbhPJiMB09KM8+IhwqFRJlgLVd/C+sc1daSngj6s3MXI84Al9cUkFsCa
a3T9eNn4x5ICsik5iCYaaNUYjvxlRKEVmN/i6arJmIdX1O/g8H4+H2lRsf0XwMgH
furwXcPvVx7DbJF40ItRtr4VK69tB1icta623MGeVqy0xCNCVmc1MQzxcSS4VcwQ
D1/k1/mdyQgz27npuq7R4alODCV2ocLZL6XJZI3DkDEe3DdhE5j2YCFPlgZA3c6L
Ar4OSaLExr9sLGXsRndlY/DERzyIV0EUVgZ0Hq32xUsKDvYaN7GDvKr1fVYUMzqB
j4mw6GouyIVuQKcD2hKcihBpbDqcYc9J4gwgdFdk08R0qRKrLL/+dQmhpRUEoANz
Xe6D2eYDBxpzg33/uKa9khUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356045294868866162357755058237722818076458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 14:57:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 14:57:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chefigata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816571575820856063239752576138509364395484341389076933842006312060229725714238490808058818938416316810873527384703555576373812965660640791689577519362601362802036097355890786357651330026477341428144613027449037293004053699674457036801131664125006901003357161391445537370753694743618844056381518039942983777312619500780368668334447747290789937630441917188868661262916675542735753269369118849946058005542603971945982407683103907398127490754923176771092372568316849999737233417061859720365117166866864740916577753982936521774808586872525026967124968098654912973085764811780171843157869963033877427360413754093075087080731450582381153410202089457181904709480447990895219178040647529878064163697868943594939614892045102281778652777874344152567378832862422951842521125399808598074009789229972162003732756729655029481831620807330036913573828997020747026510208624781230831398583007795311830557864415512288894739583463618018740510359157220077270777447776716443936529930652353995980212895284806007936156668126171831906015143863147217246050857708367759841536373126386931421071058957363482299195146448275916587996530960808834303264432207159729874317505465625063092208007136259756589907521699532237432697356701016008634812051315075220799213113877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f76c08494543e988b5c68dd1acd749214746e890
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefigata.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e7b7aafb100000403004730450220665590e355cc022524d3212fbda8f37a22f13cd8759f3ab3aafa8846f54fddbf022100d40acb8141273ecb08dc487ecbe206f81026d6f9f16bf83fda97f80b108ac1f30077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e7b7aafb300000403004830460221009fbfd5cec6a2b929ea5662c5ea90d7f2b97980ad7f3ff75911fe565d003c0b62022100a78c458b381b505b0fd49a422f716a1e8700023d615a1ead3faf48ffd55dc9e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003738f3b98428e6dcfa8130acc44ec8fbbc95e5b035a418b4daeb7da5bf854a1cf12de21e4278a7dbc33dd5d1a2a4fac30f314bc46aec1425e9eb987b4898ab9474139f6534e633f12e3beed7cb31ce950e01492a6c2f66d36c819a69a41dbeb7f36bd649870c9a3a42e66fb023c9e5e88806dc4de7c181a9c02ff20a1fdbfd711546db7c606de4c92dbb332fcaab1eb09ed58824f060339c92218a0166481a2ed044346f89b1563d4c679858e053101d2ce1afb52f5cbb85a3c8de4b7da1881ee2416db6f042f3b88f802b8005a0ee473f6d8d18a6d4585b695f540bc1631e3f0ccd306c53a16df27b5051689e17211bea8e9482bc76fbf7a73cb9390d7747a7