copricapi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:fe:20:3a:34:25:3c:2e:71:96:42:25:85:65:77:96:8a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=copricapi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:fe:20:3a:34:25:3c:2e:71:96:42:25:85:65:77:96:8a
Serial Number (int): 312376721711440557904891559323265226217098
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 16:1d:b8:69:88:ec:78:9e:16:2a:0b:17:01:44:36:07:4b:af:94:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:b8:a8:ad:3c:05:89:86:00:85:40:20:4a:12:46:51:e8:4c:63:a7
Fingerprint (sha256): 4f:8b:60:61:e2:2a:7a:f2:6d:f3:fc:29:e7:10:0e:aa:7f:67:b5:6c:30:53:07:17:a2:38:1e:17:f1:3e:d7:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate copricapi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for copricapi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

copricapi.com

Other certificates including the domain name copricapi.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for copricapi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISA5X+IDo0JTwucZZCJYVld5aKMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjcxOTQyMDNaFw0y
MDAyMjUxOTQyMDNaMBgxFjAUBgNVBAMTDWNvcHJpY2FwaS5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQC9PO6UtBguxw+ny/IyVPGkHDXXj2lS0OXN
mY3PMdnPPmBYBtzJnX8p97A6huZE/YG9Sl54xZHrmTqb2Wme0JbG1AjgHmcUZ76V
2SEcbtQinc0c6oClNxrucSFIB0LaoAmuNXavB3/3cKJIqKp0wgBQNoUhAgQYhDp8
ZrpzfKIu2ZeL7tplWM7HlYjkZ7F23BXlmMh6lbEHz3Sjd2Huh2wBogO09ZdSZI/A
TxjLg90fd6K07ABIBP+bmVpkvfH6yZ+jxCrstNyrhdy5kxiIRfARMKXDPJRScit9
2e4st2rHKh1t9NjyoKpLqyOFauWYCKR98VPKVgAyGUmBzJXWlsmqEuSP3woAmgV2
lJB7A5YAx1fPL3F2oSM2pTRO4OscbI7yxBDj/CGMLsvN4YBuRI2z4DAXyj2FZY4O
R3R2WRvNyVdw3jdwZLugvlgSV4+BcFtcKO2p9SraRkd/lfJSQy5ZmE+Kncg6v8zX
74t9ZQr37cdhA6eQ8up+gTzNhJ+dwuBg9ZP25aYp/OsSu/CBJ8CmUgmd7V1iDsXe
zeASf1OcahEV4qMA83huVh0079c6rdAe+AeWHokNzowjtqWgQCUR6Q6K1F1NmNSN
fbzOfjc4tUO54ktwaiz7TwE8ofBpPXmL1PYiJ6to4eUMOR9KRSdjPZNtObmAp95D
4eY2zLJ/TwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQWHbhp
iOx4nhYqCxcBRDYHS6+U0TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWNvcHJpY2FwaS5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW6umXjmAAAE
AwBHMEUCIBOHjHQpTMUUzd8LjdtSLV/0NbG+8Wdgu1Fd9SuctjW9AiEAiv8LW6jo
VFMcqW5XWc7SbTLDxR1fxdSa+w3/DogjOewAdQCyHgXMi6LNiiBOh2b5K7mKJSBn
a9r6cOeySVMt74uQXgAAAW6umXkHAAAEAwBGMEQCIBP12j+Ps9e5Y8inAmlY/q0h
7RfQepsqFBMc0pBp4zc+AiB+PQLGuYsaMqEtG/DGNl/KoRtGkkPHaeeH/NgvKi4U
PzANBgkqhkiG9w0BAQsFAAOCAQEAUrxdoEwphp9Ner7KkhBZQ3LRQ0oLUCDxh+QX
kGbCdSl205IJlnIcwAFEOcrNejT7oQZ1n6rFwW+LKYXMg7aU37hpDw2dy+Xq+pkk
HKdJL+SFTpmU13Ngah/mdfYBlEfRD3E5SpKjh97g3mpjAUBTsmGXgE74uxlWUwev
BoIySzM6MyXomjdfNNkBNdgBzPkMAnmq5X6aNCgkGHctltFRVcvoZnxIS3XmTc7h
qc1Hg+uQ6JYKhMv9jAR2m5ITR6Dbr4swLG+JA5q5TIPuTsky2oqIMFBg/qUcjJJX
QUlzLqe5JTUqEjGT/FD8pnMp7+hh5rQ5xU5EB9Vq45pq9tKH1Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312376721711440557904891559323265226217098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 19:42:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 19:42:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'copricapi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772023747195772295375764799766529021712067514155175325651291651126222320774375040687858850947917083676930174324699688518368171950629804910866800333813024396616610213688124768418839515792682985901857423092388024185536496759352702045264084128051621244691067377959432883161706326492609655287650318134261036333087303994918172527213321650950704934914818003508104600152962015478638401179277406524054197890128165867272084723327754523499792485031123482702836531946197491484367504589030373979868785333917227205280970764746003002056227732755174021124406411061809758997034018609421429483683485376302335568010485554874659946184301386684145776980174806755623778778866389926517068755816502142011315677942785059563124879302058502023552777220753907893348053617208418529870127843727518104766734456462720485810260504728607366981241274620194165865785201143867679118436979314985898031397165621724665696274000619590900246089166544249330340080787264411201795258770338805521977964329356846025832295189131727956625352352766892609558028510762016091181610332485657102678649765524224075148450211853776125546257656457963850373632414048525679598078072081278767840922004582258340733523245112565957947266439741584928877473174884875705879397065760988105213312401231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							161db86988ec789e162a0b17014436074baf94d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copricapi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eae9978e60000040300473045022013878c74294cc514cddf0b8ddb522d5ff435b1bef16760bb515df52b9cb635bd0221008aff0b5ba8e854531ca96e5759ced26d32c3c51d5fc5d49afb0dff0e882339ec007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eae9979070000040300463044022013f5da3f8fb3d7b963c8a7026958fead21ed17d07a9b2a14131cd29069e3373e02207e3d02c6b98b1a32a12d1bf0c6365fcaa11b469243c769e787fcd82f2a2e143f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052bc5da04c29869f4d7abeca9210594372d1434a0b5020f187e4179066c2752976d3920996721cc0014439cacd7a34fba106759faac5c16f8b2985cc83b694dfb8690f0d9dcbe5eafa99241ca7492fe4854e9994d773606a1fe675f6019447d10f71394a92a387dee0de6a63014053b26197804ef8bb19565307af0682324b333a3325e89a375f34d90135d801ccf90c0279aae57e9a34282418772d96d15155cbe8667c484b75e64dcee1a9cd4783eb90e8960a84cbfd8c04769b921347a0dbaf8b302c6f89039ab94c83ee4ec932da8a88305060fea51c8c92574149732ea7b925352a123193fc50fca67329efe861e6b439c54e4407d56ae39a6af6d287d5