analytic.kristalfoods.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:74:25:61:7f:9b:c3:2f:33:f4:54:d6:15:55:b4:80:fa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=analytic.kristalfoods.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:74:25:61:7f:9b:c3:2f:33:f4:54:d6:15:55:b4:80:fa
Serial Number (int): 263192654169884162620558018702581324611834
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:75:3a:fd:64:9b:c6:8a:f0:8c:ee:d9:01:66:c6:41:da:f9:2a:aa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:9b:3c:88:54:10:9c:db:8f:fe:02:e0:84:12:d1:cb:ae:79:f0:0e
Fingerprint (sha256): 4a:66:ce:7e:27:5f:d6:4e:b6:bf:4a:67:cc:5d:8c:1e:81:d4:72:d3:0f:ae:d7:44:eb:e2:8d:56:a0:ca:73:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate analytic.kristalfoods.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for analytic.kristalfoods.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

analytic.kristalfoods.com

Other certificates including the domain name kristalfoods.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for analytic.kristalfoods.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263192654169884162620558018702581324611834
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-25 14:16:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-23 14:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'analytic.kristalfoods.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 931484899296881861319746212148904791968925077004158987340390974053062944626855564597042608699334187993519670955923631056750451056364801607767227315495804927820552040393003098210967608285721492025645471474011422051239136376229014507497329968801355017365009939017352503317146202829800659619426865910010604067921782896796543484792661086127100071668202596197494152137592361405925429271679397927826443696756223303083396007114195037191524120945700840911440414951577923830661994713402693117468900979850599671827432466176511601995852831700965986643031950899242796210104700428500980608465356096393532547685040727174003881163251603349700047062254100815403984518520014861246772585048845438727947682283087067593307913130857246777537915993160903418375224077408799409886614747853305739597203024101877151453941521406998659414513146774943589233729787875862461411387071066347549277637276124294086246054608511182843232770298884550268260728255091178697355141026892424744727029277758258491600720955033941881521037294770093467489417292256194283027208544108906329272709395014873687559640542517151200234704567963228199271476535895162633621448875279817423264709273618918211445022424061739875368591573185573326890474099733671956694912318049700974661940760587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88753afd649bc68af08ceed90166c641daf92aaa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytic.kristalfoods.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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