info.calif.life

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:eb:9e:99:cc:86:a5:af:5b:1a:57:2b:d6:9e:ac:5f:8e:f6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=info.calif.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:9e:99:cc:86:a5:af:5b:1a:57:2b:d6:9e:ac:5f:8e:f6
Serial Number (int): 341514030614734061331023086791881941552886
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:bf:31:e8:60:bc:2a:47:54:29:50:c5:b2:41:c6:5a:47:64:a8:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:a5:89:ea:c7:d1:c5:89:09:70:56:5a:bb:c8:d5:1b:bc:42:2f:1f
Fingerprint (sha256): 4d:e0:d3:63:68:d6:96:03:39:a7:bd:c3:e1:f3:73:e5:97:20:71:6e:69:0e:93:46:76:fb:d1:25:c3:13:9c:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate info.calif.life

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for info.calif.life

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

info.calif.life

Other certificates including the domain name calif.life

(limited to 100 certificates)

Certificate

The complete raw certificate details for info.calif.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr+GkWq9f2ov1sqwweC3l
ZEQCavfwpUK2AgNaO/yV9VKskYLaxt1sdjD/O2nuoU/M4FRBHnQm3cus0zOb2WUC
/hiG1VwPF/3uJxSMZFadt/OObymnyh+YwSRftFDytHLjWPPECQW+VvTqhbOkbIva
xGG0Wq1Lp8VhQBJrLYMQc2ZUF9EbSAZ+SYkTFERRDx1wQ80Uk1XOfj4HyzFC6knw
D01TRH+6q/WUevF9GrZ5/8OS8IFKiaEMI6MI3VdLfVZN9WkO1pPJy/N+il2lu+7r
bvuoqdLvG0EW28nCPQt5LnA6Y1ogkSg7k/fZkBpjFIQPCh968u3mE/qWqzVIeyT9
V6TwdYEaGYrApzL5CfpzEMd208tml6kygnEbw+Q+JSaLiKZMdMcZpx5dxQudpQsv
bAl2bBEk7hFZKb+fxh/xdybDZBfH9UWgPiul/FonKa1iTZ4zylitnXpOLmEA1CTP
HrF3lEUwKtsNPFcmOIp3HqJmiYSGTG/dk5BelUSf3pjJ/WvhHowYTODuQqs2j5ng
CGO+vxAIdy2LEbQ3aZFE6hdcStSafuZMh2vkXTnnB17IbFbivmjtvk1t/oEZPYJ7
1aga9xDVd8+qmXZP9163uUh4jd3Kh/TyJaww81RUvlyHLlJQfQz5g5xw6bNojXK6
zrpLqeQtYxyBdHIFqCBsVyECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341514030614734061331023086791881941552886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-04 11:53:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-02 11:53:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'info.calif.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717533567694417539408077587681515050817289118803704396646900682366884045127824137022823189869827877018556012985739116676368902681872333071839788596325731872521506866754746964452133638398412439151225890686236935058717103602556253932117939398882636911891494123256447785711724520898859351280752848809455659576656937553235528690975887081078891533117007988619680066159040465538038825936639942006492386496878456845593296997396213611326699190827601434599763313668757530967660252469320561935654004694918377230684994609887966925505150072912353662392772131971212381775497005562249017253109422492360385202956539924256183021471114186588001217263236004974460544773878354477619939817548195782903441945052726628153416143080148956122676537118790931535071120668271666150095132236835855280397395420344183942426778244987453987625174905569202128095159391614572428224832432942965696835932764849703773210910760607845523824064593461693420657897962818345131888137319357630601502352104839993118801848279619247798039573494630972012963314145427248150199954822323396377215580382162357051593815064833775909367533993659316404327534171204410904484613458903475796640831392410879144109066334592156465097954692183235294296840308061208149130390340062993360521395984161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40bf31e860bc2a47542950c5b241c65a4764a857
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.calif.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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