leafky.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:7a:50:0f:a1:2b:58:d8:cc:ad:2e:11:54:df:0a:56:89 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leafky.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:7a:50:0f:a1:2b:58:d8:cc:ad:2e:11:54:df:0a:56:89
Serial Number (int): 312882076716582183929818644789501232830089
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:a4:d1:6b:c5:bc:77:69:25:fc:00:18:00:a1:e0:91:d5:68:b7:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cf:ab:d6:1f:4c:62:65:a7:df:a5:08:e4:8e:b2:52:c0:c0:b2:ae:b5
Fingerprint (sha256): 49:9c:4f:3c:24:2a:27:1e:7e:7a:8a:7e:11:15:5d:52:f0:06:9d:ac:a5:8e:35:8b:76:5e:b3:b6:f6:06:3c:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leafky.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leafky.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leafky.com

Other certificates including the domain name leafky.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for leafky.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312882076716582183929818644789501232830089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 23:38:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 23:38:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leafky.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798226958606285682235745278857400303525574035621721736158044122334713109724032891716619602705130540404884485597806976846196541535781508810661968544121049994940689822635582512507093826372603030316985570138034614757226381561445957427546489024279915423502671858450616969960853609187031179721375167533091928386804811199267280308291325823778366644932628759612516894548200027065604959923255715538783256177978923189779675952610439626629627256514348692827654980268475014164831409710918735688024103189496054257251774274961617521315308950703578542647120211070589728816117304266290756002693754098035408893708693174146528225116095409744326995202546805626331485887994090356089294338639151412121286712142613811246220881795365512538141061971952912671783078173513144745187685449930813564109807596114427463790811791487896077485110509789761269896822574278832259458799134350067843634528314063087834467634023169233482156180959534932031200312995252294724200579102268645303241528179176719532127525525099709127276244516679569934581925162974893847609268752013037120725065828387019583475286071924043781336337560841595619647698435600017616932025483989554337406197982527851118799611481251254788384344528209722769385739416161559508911032256143950276304463587189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ca4d16bc5bc776925fc001800a1e091d568b70d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leafky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169f53b20b50000040300473045022100e5b9527d64d83a1312b095097c2b54c3e9f25c5136259f10eab0842b53378fa0022055987a1da836c0079b7ad1c01d86c7c60d3e58854998141089c28e36825bdc62007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169f53b213b0000040300473045022100edf0bd0230c717bb5b34e999bd58e9d2c5e725120a8355c9d94ae15aff7ffff202202c222e8a2e198a2efef7174ff3c2357839f492f722d92e2ef865222b7c6b9e14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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