rosalba.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7f:6e:b4:bc:75:c8:4d:68:b0:48:58:d5:1b:41:a6:de:1c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rosalba.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7f:6e:b4:bc:75:c8:4d:68:b0:48:58:d5:1b:41:a6:de:1c
Serial Number (int): 391812157841395739545650028286952308399644
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:f4:19:af:0c:d0:37:c7:24:f3:12:57:2d:cf:ea:76:9f:6b:d2:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:6c:ba:c2:57:b9:31:0f:24:70:43:52:aa:af:68:11:27:35:43:ff
Fingerprint (sha256): 49:45:1b:bb:6d:ee:1d:52:0e:0b:9b:0b:6b:d1:59:d4:cc:b5:0b:69:cb:3e:e7:60:03:49:93:fb:5a:07:9a:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rosalba.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rosalba.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rosalba.net

Other certificates including the domain name rosalba.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for rosalba.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu6M0JyBjZaefD0KC+Pz2
jWXkkWoaVjxkggjI7Yi/T0tgKAvJ6DHfD5sBsgwq1/iozpsosFyw2dOMLCspi5l3
nqgJQvzcrKJdrk2ONxjRmOUBvfUpVYNfT+FDlnRFy7kY36IWVOPVwGv7jbEHUjVQ
YKZUx+ifUkijiIakuFE2rHONoyMm7kUi8Jg6FSSGkkpSVvC1xIkSIVHRq9jyRBTD
W4Ir5v3HaauqHbQQCuqJ26WTy9fLC8lhaL6yeUwJ15NBg/ESd7IWDOG0J/U1Jrl2
pP21h6Z+fuJ//yFQU7hUEwPJxFtV2EAwoYzWmld/DKbli9EHrgoA2SEOkQ+qW/jS
LYVFBuEex5AalbLGEFeuk9kOl6jyMMx31oOBds4acjv79J/8NMTQG8OAaQvm0rub
Nlo9OVAdVrW1yN6Y3K5MNiaAT2+8uRisDs7CjbF1+r+6edMXHf/1mIYlGFF3I+su
7mlG+voWqlmMnvaDDKvpieFppSew233V7XzsXai5reMFZTph7/FdLNukIzsLd0QJ
YJc4gdPT4Snh62Ml4wrKmM4xxO+kmYJp5vSxNF6mb01vzj6KK0q+Pova2ZAQeJQ0
CuB777R0Xsst0pw/E6q1rwS4KvYx2G4Ftj1IdEqVZVRdfyL7SYIun1veebbY8ixH
+DXMEfP3Gyo5SoAoEW/8tDkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391812157841395739545650028286952308399644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 20:27:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 20:27:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rosalba.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765494273127697408513024812045549228524588514292134805053406554090558828314155174446803938386838020151873475437686993719245476258214847139427385744492168461056670137695898408308285211388034366682909030317114030386916823874411917554639450763270036214765034501102270000019909361700691803425332264491307899120597177628127681185700623051345998528857030469127249302854914810273862950170264117008699131254893368085988079950103227520319065214077494846299615382465817103867589352419655620477139699445159400875465064262806835371483683364722184032850759968968110319854702943103999725416687069171357370514903551122800790398522742184494201505181677355866872573787993554145548718566032822256606950328107033017021196814948241522208870727072896599089009165779652406797521136118479469717616918125907212097299594691569832780574182667473335746475114615041154006189242341131556957060323603646477149482735325914464866546607209957962068133426417494368055811745954074168313841860922538026039154775614421866961484853690238013299279873946538108340538194927464243957046866660375957679605708340550692570717076560622902617214672006171084841966973742896281897001899174047243694670159839631587692032731342724242522427065161730180534533779979563971987608423937081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbf419af0cd037c724f312572dcfea769f6bd2ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosalba.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec88320000000040300473045022100dd99561a72391edc711935da1d5f4caeb90aee6dd01869215ab6d461e51c83e902204fd88c99f27bee627396157d66c60f86d41e25a522812a241f51aaac06b11b0b0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ec883202e00000403004730450220125e22ed6fac33e293aa64019e65cfc1eb4f6d95827d4c54f2785865e864bcb4022100f4b92b7df2823f6da6b0b7d937f4ed0b873b52b6bbd40cdb92a4ce56904c7b30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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