www.caivano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3e:78:56:da:04:cd:24:fc:fd:b5:c8:60:08:5c:40:59:6b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.caivano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:78:56:da:04:cd:24:fc:fd:b5:c8:60:08:5c:40:59:6b
Serial Number (int): 282594322863348643963706005033803736701291
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:a0:0c:49:60:02:d1:b6:b3:95:43:59:6c:a2:79:39:c9:c1:a6:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:eb:c4:94:3c:17:2e:be:86:ae:1d:6b:ac:79:2a:74:d0:11:41:7c
Fingerprint (sha256): 4f:36:51:70:1f:50:d0:7c:14:d4:65:b3:dd:f9:e2:d1:15:28:86:ab:45:6e:db:5f:a9:73:30:d8:3d:ff:84:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.caivano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.caivano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.caivano.org

Other certificates including the domain name caivano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.caivano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv8keyQgqC/v3iI681fQ0
NsFuVWq+yM1xoVgC0+Nwnh7o8AuLO6qyF0SPioNfKBF+nNOkGUbFN3TdRVOj7BqD
+I83U3U6sO2OYCmSUy4R2jawPgN3uZ962MD9SaBc0pRy4vK/JXPbJ82M80ChWi6p
M+Yxr5eBU0L3go8fI4BL27JXvh0zWC3vhC3Mj+s6/W38z5U/Bt8rINt9eqC98M36
bHue3Ip09YQBfN+NXwBqrf8R8zjeVIvwycRaUw4IFmHjdaaEkeLJWB5YEp2h9wZC
Xf1CzkdCR1EMIe42W3rtu8R4UKBAUfw3IPMPJVWg1XY7xCz3DkqCMfmi+p4d/QCO
zO4BETfufd1h2KiZFZ/LsIbikwXpoHXJuYseQakmGKPoeVKEmgpw9eZ+tH5pWjIq
IIvWaixj795qliEM/USs2x2wxQqmnrFfk0Lfou/ZgAd7RrWsjyZCjo7+SYk1wove
YQMWLciwBktCZW2MHevDrkiuVhN6Fvq04hn59hZHWVdKV3n5mIYUKDzeSKDKWu1q
CsIZL9mUFpeZ7bBxs0PubCbO77sFP49srTTLaTHzOOHSDbkZfjPQW9ltQCkPZ+2e
XtH+WcSjIi+6ErTuNaIem9QG6r7AZPOTdkanPhTIt9bfNMCBCKZz/IxLAG0DXa9T
iF/qZCxwYRhlxJ5LPyPyVpsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282594322863348643963706005033803736701291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 13:47:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 13:47:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.caivano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782417091426541973524078297605131603821948328078867778156665474647211365070086860290157789329690431844838853322749909503508782844795132326584310981484501409010287684460209445617119130594348882568762691456938776086137837074154321048987428040413796543022783467751204142139778382573704552116372135298805075477040204888658116150609010611053537444900334701434926761601863141865062135083225310054002079621808237328650795042257931543438957460464184090292941303290575755208524704250637795983779421461877097357700015462974648928489221043929655589368632218704211969647147442667713677762018042234332079431145912294738224437768809750906677983230183143631842197765757783697101647071944426106785149572825982092388703042530870507713110315832735344661703478981527426819796662167195947663158261872219810178018546808509830907242617718277920925106699467227697109536366650072789690396379716587085444634299981252991950013326663973866261375761901909889475232809225137529588698643271443333914162840489572150105351059871341362601872718115868199894158524354615572659292259257328646282224380197731030174061325668436048587571026066181675356624344564860645396166661216398541989493010826985375457726809537389655575922612166539195964465363155993788505526914668187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7da00c496002d1b6b39543596ca27939c9c1a66f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caivano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d82a3c9c30000040300483046022100b0af3d81d0a059e594012f09c09e0a54bf6d93d1beeff8898a26cc48d3d54144022100826b16b212b9b093d27ac79e70977553042f13ba386ba59f9d90729e82f2e9e000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d82a3cb2d0000040300483046022100a7231a53b5c4b476b258e990275b1daf4e66c7b9e5817095f2efaa595643e2eb022100a6219bd7317be44efd081af9c40b8d22269871dd69b7356890fd7bec43fb93df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007ade2a9f7fce899dd0e71ad038969baa4a941663b6924f62ae8ffa501122200b702823d91bb086f8e5e9b5b2b12f13f2e1fe1db4c6314dc82b39d3c35780694379ef11d01f3eb6ae057723da96d1f44bf5fb90c0b7cfdc9be857288c1fa0368f668ea21848e016d9239ce020afbce25f7e91ca59c0853407f2cc0e9a38b48bdaf92dd681fb15c6b3e5d6ee8cf4f71d40ef6da386d1c010d3927dabb1af5d68f6eca3e9fd68d2aed1ebc7228e5a0b3392dde04c76ff3e48f8a03263977c9c600c3e15f65d5ac30525d9528c6abf505c302e4a55b51e4b3261ae6d94084508f3be2be7426194f301cde49d94329cc1c95d2f6d105d0f904938aa5cc82cf63287e1