terrafence.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:57:ef:07:05:32:1b:22:e9:13:1a:ff:87:95:81:70:3b:06 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=terrafence.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:ef:07:05:32:1b:22:e9:13:1a:ff:87:95:81:70:3b:06
Serial Number (int): 291259145659854845341981135237372145842950
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:7d:2f:6c:af:80:ba:39:fd:21:83:14:13:02:21:01:00:18:9f:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:c4:a4:95:c1:1c:95:80:a3:9d:32:fc:8e:a3:5c:e5:aa:e3:bf:44
Fingerprint (sha256): 3a:54:75:9b:2c:f6:2b:bd:bd:c4:6f:69:d8:a9:21:48:20:ca:35:e3:99:c6:6b:80:bc:cc:31:69:52:05:13:22

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate terrafence.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for terrafence.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

terrafence.com

Other certificates including the domain name terrafence.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for terrafence.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291259145659854845341981135237372145842950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 21:24:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 21:24:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'terrafence.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636482388438723910210610301656504541899863208081129863967924430156227935489005691137106802754107700057382561724186080416146826272509561908106288208000407714613883093674980104627090291575978699727784690038788659075534634278012653685494921389471301614807753734241628019862779966153517161585189871003021906938370118593875842585342318480756167279285022923425178665099143158627267518423166461571956094251356880256973631319035580022175164224063108511481306368679361630351623463631148447602649955085919945909927002066748540615267012087779125106506577017273475380321336347850281134113709099713821748089158156160174020820735983332721533313403651935869830290267967759137530356428065160580386036765229435180198871622409658608922921531954807962999029200002076859445928257247291344308049206874386729624723750018559871782365617445492489121888750714336847348962389305671577488898611989643596911086611303414547449910381154502624597567994387546149981498304623234956174746500304504703963532286760026963067406502013015650320467195611422192216791344394979920087554150772715677928400141532276782949785864985788711999259114766178937157921245923362361650478696955292589806804353642228243304076614101417574341445103088150996720032382239860745612622749266919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							267d2f6caf80ba39fd2183141302210100189f33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrafence.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef70feaef0000040300483046022100d40bfe3169b6e8af6d3df3f0bc3a71b20fa2f4074faafaba4f858a80a3084cfd022100e3777f7e1b407559fb9707ae9182a3714b357c81a59f8b5bd819a38e3256814a0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ef70fecf8000004030046304402203699b236b36be6bbd4278df64cb5827beb495e9bfd26339256b58439abbd3a53022019efcfdc2fc13727dafad8bc922eee81efbb112a98017e457474d8d1cabbe403
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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