cisterne.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:87:b7:a8:5c:eb:ea:e5:85:77:9b:59:d7:1e:a8:b3:1d:75 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cisterne.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:87:b7:a8:5c:eb:ea:e5:85:77:9b:59:d7:1e:a8:b3:1d:75
Serial Number (int): 307519100243381304656608044141403595545973
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:df:17:99:b8:59:b7:90:4c:5c:94:0e:f2:cb:40:e9:3a:22:30:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:d5:47:3e:71:92:11:68:bd:64:5e:d0:a2:eb:35:57:48:10:29:cc
Fingerprint (sha256): 47:5c:b2:26:84:0d:82:07:52:08:d7:27:65:4b:f9:c6:57:41:36:b9:09:f6:19:81:e6:88:6b:77:25:26:4f:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cisterne.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cisterne.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cisterne.com

Other certificates including the domain name cisterne.com

(limited to 100 certificates)
cisterne.com
cisterne.com
www.equilifemagazine.com
www.cisterne.com
cisterne.com
cisterne.com
cisterne.com
www.thelogpeople.com
cisterne.com
www.cisterne.com
www.europhiles.com
cisterne.com
www.cisterne.com
www.cisterne.com
www.cisterne.com

Certificate

The complete raw certificate details for cisterne.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307519100243381304656608044141403595545973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 22:57:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 22:57:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cisterne.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940231469058828956480099388184280015356628991031630553539166101015082052182627586385529514773862715423980488155882613022623927421084869242173079093370612307601540791923330281058296923617096271333768673366688395710223219769098984529653440539896147139144583938903807108745425222550309856582183917956191733324557081016501168352419595135236762261375377190189032364309443935307180302064935040474430832485486457552990889363267403545405080273497081796195852930467624700029096241646266254807813963142513557109015775879873575429374703588139590650428290483496926004061897470485524445006622236111130981744981160658845476421007033049135048844832069441462690333725532299499000166477326170356118394263420461157541785517517230958824943772031141684581194918490692871111514574786928985804175124344529172687034391604950330940489699962582850447662321933179567205318899738339435137370974213146216032110772272537113353117200852612286822091161880091943218235504896306333076221953083882651338861132343901455104116050462664115882990416130797429400467010078229432499041401890951452478507661111505804661469139849193364157977272793282943217042202176680172857621073369191056597327658010482163834079920967459323583589460938002167934021856175738733074487529594951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3edf1799b859b7904c5c940ef2cb40e93a2230a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisterne.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001701cefc3b0000004030046304402203383cc3a8f1ba8a6b26f316604fb7081cd97f4874aa9a47a370226f4208967ab02201dff618c73a72c1bfe3bab1e52ac98f689eefb0fb4eb7717b8656bd1eb3a2ed600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701cefc3db000004030046304402206647996c853cf4799d22bdb71b94a0920872775b6d507d807890fa7eac93612e022023bab7ab555d30c788245b1b3fdeec5a9b3d9c3323d31e8210e38a09e9a8cb52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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