caffettiera.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:e4:03:fd:eb:5c:17:19:73:b3:f7:3c:5f:8c:0a:cd:d1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=caffettiera.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:e4:03:fd:eb:5c:17:19:73:b3:f7:3c:5f:8c:0a:cd:d1
Serial Number (int): 268445589843725794093759801273648193129937
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:70:8c:7a:6c:eb:8d:43:d0:db:aa:94:7e:8a:43:c2:4d:34:46:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f5:b7:6e:87:13:37:a2:5a:aa:17:67:65:f7:2c:ee:dc:c3:c5:af:93
Fingerprint (sha256): 47:30:66:c9:74:9b:48:18:b6:cc:e1:f9:f7:84:1b:0c:3a:ee:1e:54:9f:2a:88:48:d1:c4:7a:4a:0e:49:35:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate caffettiera.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for caffettiera.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caffettiera.com

Other certificates including the domain name caffettiera.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for caffettiera.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISAxTkA/3rXBcZc7P3PF+MCs3RMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjkxMDIxMzVaFw0x
OTEyMjgxMDIxMzVaMBoxGDAWBgNVBAMTD2NhZmZldHRpZXJhLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALwH3mc2MpOhIYwTCHIs+4Q+Ilwa4Wgw
suJ+DCHd2tTmg9YezgzzcSa2fwfzTSbt2cbKeYeylxIK9ikgBAiT43DxveWw3P+9
0Oja8SuOCJyXr8tV2ix7nYuANdMuIy2IlXliIg/GyelmtK5WbgfQZ05jHHD1aFBO
dtQu7FmThMCYU2PxotqvaAHDn1Tw/WbeFlTl0VTHYq/I/LIT5lm9rwbHTmU64nlh
C9vW8v/TGLv2oZIEgl0jR/SQadGnFlN5+pQIcekjH0fHL9dkKHT/oLkm4s6qJOcm
xQiKt/iOdlHKPg2p8df4Whb2oNo1nLjGYrnsl3AGD+BHyEH59XNAXZ+Sm+jJQQy4
rUOvnEXw3SdWUHtWv0FIIghwIkMh57XA1ck10De2wewgYmG1TJWiPvRs5XUxPRx9
Tp3NYAnwRpMXoBAJfOjzK5joAbFizHLbmKip+xah9DJgpYRPODkAsQvt3zjcN3yx
APvBkstpbvc6/AMYqzoyWw8/4cUi8qYNb47CkFZo1nVXEeAyKohc2TBMWc0R+kr1
uZ4mLMqXtUdVcihBghZbd2C5R9pU+InXCL5/cLvqz6lmvAqPr9BdOXsvfIIYmtj6
YLOQ5ibo3UXyAohiREj8TsZXivfU4e0ao4CAEFh7iWRYdRt5pg69JHT88bJvhsHJ
DiStwuSXEc03AgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPdw
jHps641D0NuqlH6KQ8JNNEb4MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPY2FmZmV0dGllcmEuY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFtfMEl
6QAABAMARzBFAiApyNWfY1wmYuR8wonelhsB7TJ4p/L5+tCKBy+7lFIcxwIhAPY7
btMZ2HsoLkVQQQnManuapguCZiIfsYrvF0mXDtUxAHYAY/Lbzeg7zCzPC3KEJ1dr
M6SNYXePvXWmOLHHaFRL2I0AAAFtfMEmDwAABAMARzBFAiEA3FhK1hA/2MjYAE9+
VQaPsMyNxo1XgBZa6FMCkp06TtMCIDURJDYpzDsqjZLWRwVEQ0EnD7X3R3SiM/LQ
QoK9pBgmMA0GCSqGSIb3DQEBCwUAA4IBAQBx37f5rIwyLCHElRxcf5UZcocpNHxF
qr1G45ErzJ0B3UMsBTnG0y/mbUa2xDEp5esW7M46X6jiFPAD0lqQi0obyVpmJeQp
SDSUA2Fyrj3n8tClIqe3EDEVIZ2xylX2av4/YKtAPKja6BM8eRk/Q2tueE6mK3+R
sosGMqW/uyDtSzQqTTSktZXEFpvHEyK+cs/uvEFkzTavJclgbNb4L0CVnmUiVg63
387J7R1noNVaY/V94/ExnCLCVU9Xr088EwIDclnqJneLED9vOEZCZqPQK+2K9O4h
3mD4+jnQTqHUbUj/GZdJBtV20dLOOtKDOSeeGWUkMZqGBWuIg2tQXDCH
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268445589843725794093759801273648193129937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 10:21:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 10:21:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'caffettiera.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767098482247899032784540957557179010785531923127618650267130723739399039893626172411028676327382839264152704199816451010415728290678661442741527795827038543081816234524971631209944077592149637351708998166741452847939408552067046521844528296552805997165820184090727860077713377004894692125621605136228797721857693791130801781349039315939885783860597893910616184544445086262770986143909543008499324082104282902932621399695863062374585135773811174727838750100591719098740358852832135634281701676643344901685607029275406177173188957099971453947998427729019430492674269116590804912893185872603749353093255239225906740647629832068511481323753836500023516514857659957121977417555701760411262520611441359163137132858530703713906979313608580967758168369533257124780571824051214814920851066224105521809410185849994450911803270965574983032211324974485007912081314983444990806452717495185646939959947385196056789319398309627659717016182596458021975051273979641542534760206283443188696285609340461901832353918480365629196965739770151766372244162722356237282961262062124590166295849030358525829991269844715018589883898099791313713971173050962642373768040105490184412412151492039774409822193920587174910403703547516213077450738249962298026734243127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7708c7a6ceb8d43d0dbaa947e8a43c24d3446f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caffettiera.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7cc125e90000040300473045022029c8d59f635c2662e47cc289de961b01ed3278a7f2f9fad08a072fbb94521cc7022100f63b6ed319d87b282e45504109cc6a7b9aa60b8266221fb18aef1749970ed53100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7cc1260f0000040300473045022100dc584ad6103fd8c8d8004f7e55068fb0cc8dc68d5780165ae85302929d3a4ed302203511243629cc3b2a8d92d64705444341270fb5f74774a233f2d04282bda41826
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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