cafonline.com
Issued by E1
About this certificate
This digital certificate with serial number 04:93:8a:f8:78:6b:22:58:9e:66:b7:2f:c4:7d:c4:93:85:f5 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cafonline.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:93:8a:f8:78:6b:22:58:9e:66:b7:2f:c4:7d:c4:93:85:f5Serial Number (int): 398655375259835371194385725229891895657973
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1a:3e:0b:c7:be:b3:46:8a:63:70:bc:ed:8a:d1:11:59:2e:d3:05:51
AuthorityKeyId: 5a:f3:ed:2b:fc:36:c2:37:79:b9:52:30:ea:54:6f:cf:55:cb:2e:ac
Fingerprint (sha1): e0:0f:a0:7d:71:42:ee:61:f7:f3:11:98:be:98:f0:91:a7:0b:f1:b2
Fingerprint (sha256): 4b:86:1a:9c:89:0a:61:c4:20:a0:fa:9b:46:40:ac:22:19:a4:12:3d:57:f1:25:cf:3e:57:e3:83:e1:a5:23:d2
Issuing Certificate URL: http://e1.i.lencr.org/
Revocation information
OCSP Server: http://e1.o.lencr.orgCheck the revocation status for certificate cafonline.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cafonline.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
ECDSA with SHA384
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cafonline.com
cafonline.com
cafonline.com
Other certificates including the domain name cafonline.com
(limited to 100 certificates)
*.cafonline.com
www.cafonline.com
helpdesk.zoolatech.com
support.cafonline.com
support.cafonline.com
*.cafonline.com
cahelpdesk.ca-usa.com
cahelpdesk.ca-usa.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
fr.cafonline.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378560.cloudflaressl.com
*.cafonline.com
www.cafonline.com
www.highq.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
sd.mareven.com
*.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378558.cloudflaressl.com
ssl378357.cloudflaressl.com
*.cafonline.com
www.cafonline.com
ssl378560.cloudflaressl.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378357.cloudflaressl.com
sni.cloudflaressl.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
support.cafonline.com
ssl378560.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
www.cafonline.com
www.cafonline.com
www.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
servicedesk.gspretail.com
ssl378358.cloudflaressl.com
*.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378359.cloudflaressl.com
cafonline.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
www.cafonline.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
cafonline.com
support.cafonline.com
www.cafonline.com
helpdesk.zoolatech.com
support.cafonline.com
support.cafonline.com
*.cafonline.com
cahelpdesk.ca-usa.com
cahelpdesk.ca-usa.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
fr.cafonline.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378560.cloudflaressl.com
*.cafonline.com
www.cafonline.com
www.highq.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
sd.mareven.com
*.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378558.cloudflaressl.com
ssl378357.cloudflaressl.com
*.cafonline.com
www.cafonline.com
ssl378560.cloudflaressl.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378357.cloudflaressl.com
sni.cloudflaressl.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
support.cafonline.com
ssl378560.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
www.cafonline.com
www.cafonline.com
www.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
servicedesk.gspretail.com
ssl378358.cloudflaressl.com
*.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378359.cloudflaressl.com
cafonline.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
www.cafonline.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
cafonline.com
support.cafonline.com
Certificate
The complete raw certificate details for cafonline.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIDjTCCAxKgAwIBAgISBJOK+HhrIlieZrcvxH3Ek4X1MAoGCCqGSM49BAMDMDIx CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF MTAeFw0yMzEyMDIxNzI4MTVaFw0yNDAzMDExNzI4MTRaMBgxFjAUBgNVBAMTDWNh Zm9ubGluZS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATutWfac0wsd/DW 5gEf0sK1aOVEHkTo7VGPa/g9qDqomMHrsLnYri0NmxBgdUoRrnV9WTz5gGJ9cyPw FIwA6oLCo4ICIDCCAhwwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQaPgvHvrNGimNw vO2K0RFZLtMFUTAfBgNVHSMEGDAWgBRa8+0r/DbCN3m5UjDqVG/PVcsurDBVBggr BgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9lMS5vLmxlbmNyLm9yZzAi BggrBgEFBQcwAoYWaHR0cDovL2UxLmkubGVuY3Iub3JnLzApBgNVHREEIjAggg8q LmNhZm9ubGluZS5jb22CDWNhZm9ubGluZS5jb20wEwYDVR0gBAwwCjAIBgZngQwB AgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwA7U3d1Pi25gE6LMFsG/kA7Z9hP w/THvQANLXJv4frUFwAAAYwrydMHAAAEAwBIMEYCIQC3TmYm3exPM/jERabvBuOT Nyd9ab7CgzIjgScEnD4ndgIhAPD7ic8u9/Ji15iPy/iam7a3srg4OIDQtbQIQ5nd OHuFAHUAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGMK8nUEwAA BAMARjBEAiBbofvJyPllA1dEJWawuUK9Xt9bRN8LiKJUwpe3uXxUGgIgaAX0qgCk 5GbuqTrDtFiEE2JAb/ECeTLyhXTOtycV2PQwCgYIKoZIzj0EAwMDaQAwZgIxALzY wMEAB89RUEF1/mHvJ8QRFzaI8wCQ0rj+YTPLGDr2f/WJcddUwKPEkmXkd2tvJAIx AMeGXZY1qm7JQBYpAnJzUmUA09O5Bt8x+MNx3vvTSJdB+w7Ynj5cieRkpsv1+RbM TA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7rVn2nNMLHfw1uYBH9LCtWjlRB5E 6O1Rj2v4Pag6qJjB67C52K4tDZsQYHVKEa51fVk8+YBifXMj8BSMAOqCwg== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 398655375259835371194385725229891895657973 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384) . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 17:28:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 17:28:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cafonline.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004eeb567da734c2c77f0d6e6011fd2c2b568e5441e44e8ed518f6bf83da83aa898c1ebb0b9d8ae2d0d9b1060754a11ae757d593cf980627d7323f0148c00ea82c2 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a3e0bc7beb3468a6370bced8ad111592ed30551 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5af3ed2bfc36c23779b95230ea546fcf55cb2eac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafonline.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c2bc9d3070000040300483046022100b74e6626ddec4f33f8c445a6ef06e39337277d69bec28332238127049c3e2776022100f0fb89cf2ef7f262d7988fcbf89a9bb6b7b2b8383880d0b5b4084399dd387b85007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c2bc9d413000004030046304402205ba1fbc9c8f9650357442566b0b942bd5edf5b44df0b88a254c297b7b97c541a02206805f4aa00a4e466eea93ac3b458841362406ff1027932f28574ceb72715d8f4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384) . . . . [c:0|t:3|false] BIT STRING (832 bits) . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29066166001892174926236048244730871111423006190453946686652857481947117167231093542785963544629665946313569791078180 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30709687451470523494268118418412615453188315003210803890348982366996329173405302299807659680980612833400706618018892