cruciverba.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:c4:74:06:41:35:b4:fe:db:79:b4:b7:95:5c:f5:fb:f1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cruciverba.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:c4:74:06:41:35:b4:fe:db:79:b4:b7:95:5c:f5:fb:f1
Serial Number (int): 318765426558468745053847648123940718902257
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:52:a2:c5:b8:9b:a2:14:6a:23:07:03:62:3e:d0:cf:86:a8:39:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:07:79:fc:3b:6b:0c:38:c8:1b:e8:7c:c5:fe:4a:c6:64:39:27:6e
Fingerprint (sha256): 51:de:5e:a0:64:3a:66:d4:ef:22:ab:a8:a7:d4:1b:9f:b7:fd:78:c8:a4:74:1e:0e:eb:57:e1:b1:88:7d:64:04

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cruciverba.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cruciverba.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cruciverba.co

Other certificates including the domain name cruciverba.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for cruciverba.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISA6jEdAZBNbT+23m0t5Vc9fvxMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxODEzMThaFw0x
OTA4MjYxODEzMThaMBgxFjAUBgNVBAMTDWNydWNpdmVyYmEuY28wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDOnUQ7NIh/Ec+I++2ZHkCqcAYhqQRxCwSO
Ndsb/Htsd2V3WD4l4WD57DSqM+0qvCXw74MdF5G2s3O7GguXC4CxWkbj51uYaMSK
QgK00vmioxTCvyYuf1kBFbQe2eK3yVOxnfBXj7axyjoG7NQHDeKHRuer7RVsMBEg
xNbOuueBWYtuKttixWGGwI3AByHaKtryxkItrLvVqdLyeIHdSn1f+YBsIW/i+cWL
c8OH8ZR7o70MQKhf+HrPBO6qfN+jIZb+V5NWxAXpc0VrwqlJ6FELulGhDXNUDgZe
dS8Gn1qWuX3zwc8n99CzHTPuNfeORyLzy8yAJg8w53vSSp9oRI2WAEbo/wQuCUWr
Iboj1fRKjQOsBjND6Zy/xXqsfd/BVJ44RXF/2w8F6BjmYZXd+IaKNdKnMAqZQcWE
Rb0U9pf/hmgZmJ7B4qe/1S/t2eJCCYPz/yT/j0V5AsIZRRcTP+/rNk1ytxLDCn3E
JAb1iOH6MQxGIWyd+OLxSfz42pEhyW35gQZYaspQ+IN5aKEW0K6b3HtCHEO/jzXd
X50TUW/0UjKIAaBeD9vA1LKQPdWuInGR1aV9SpgvsQSBrcxQndMr1X7LW89hznnT
zY0SCvNxHTkFrWsaGNhBxoQToMRyX7OcZM4Vn8B+9aavHCdbqMQKGLGzbON/2hjZ
9sAfyWBMiwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRwUqLF
uJuiFGojBwNiPtDPhqg5bzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWNydWNpdmVyYmEuY28wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWr/3HKTAAAE
AwBGMEQCIAWCY7vhUCYcA7DIeHeClTDzFIKIeVpxKR2SEgv9/5JPAiAvS5uAp14p
DqKITDuCjexAPok+IkI47duYyujohm+ADQB2AGPy283oO8wszwtyhCdXazOkjWF3
j711pjixx2hUS9iNAAABav/cckgAAAQDAEcwRQIgJKxoheXyZVigeQTqK8yjpuh0
eCK2Z07r+V9SEIBLwhECIQChck2B0W2u80PtOYh8LmvWy156TAI9Wz93a3n7v0yU
qjANBgkqhkiG9w0BAQsFAAOCAQEAFqNHtWOMPdg6H1/wuymjEIlpeDAWBWiJ4v5D
NPbkjBiyGp1fK6EYhCqWGHFYV9E7qY0vKyFW4rYdH3IzUIUz23d8Q2sGZM/fPSJb
mfLXTZiluNreoVcrq4DydIy4x360XCwQpBA2Mou4Fs9Nu2yoB0F26kGAaqmrAltf
XMIiePMnbs17y51r/rxg5Z0b3gunBnfbtPv/CoULFpK0AGLiI5NI6L0qiDpUwDdd
W+dupyQVt1X1yxgs+FmAVl7mp4mx0tm0slxh4h/UwO2b8kZDMoxzDzw0QsoubKDc
z6iI7OM8B6u0nBRKMlvYBxSCqHHRwjfGjQjDGston5qe77g6Pg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318765426558468745053847648123940718902257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 18:13:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 18:13:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cruciverba.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842912894651537829841240143149510665929441100515329898260535767499583544105264545078411224311163703820185642326326565932469839728492754254890173893734231199223020680083391197518733838614567344588646177789740337001830405837823581452936010912150854506822697272735075768165387050298672615433203302980810215848815947748131926686944590764559847952536877741133248473210295328324658499985844889332913156482393821212910161841259292472126720795813435358076031471109800957958851796161455426416168614314138225829244202028315567179918472513538241844739205140947219245024432096909739772689775505882127538707665567709338388536207233336797351916825950332946269925952283241304604550959209150266240169078472215897791541140242673461459817355851443095493225109303239806042312991065431871171526304362167707982082087485815586926000408963264504603244518185233010697041381615913363946545410482352760973875498633042537295671570925401976981823507854022662330813167353858422573699836534495482157310531762368467172918712551293282976196222514121176096383864793846479350300842591719914410846312415931671377312242560900047237689897856569661057291832291769174895401095022332359994634745653168731917492433155329816580696536414749294288046962105829855926327372172427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7052a2c5b89ba2146a230703623ed0cf86a8396f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruciverba.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016affdc729300000403004630440220058263bbe150261c03b0c87877829530f3148288795a71291d92120bfdff924f02202f4b9b80a75e290ea2884c3b828dec403e893e224238eddb98cae8e8866f800d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016affdc72480000040300473045022024ac6885e5f26558a07904ea2bcca3a6e8747822b6674eebf95f5210804bc211022100a1724d81d16daef343ed39887c2e6bd6cb5e7a4c023d5b3f776b79fbbf4c94aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0016a347b5638c3dd83a1f5ff0bb29a3108969783016056889e2fe4334f6e48c18b21a9d5f2ba118842a9618715857d13ba98d2f2b2156e2b61d1f7233508533db777c436b0664cfdf3d225b99f2d74d98a5b8dadea1572bab80f2748cb8c77eb45c2c10a41036328bb816cf4dbb6ca8074176ea41806aa9ab025b5f5cc22278f3276ecd7bcb9d6bfebc60e59d1bde0ba70677dbb4fbff0a850b1692b40062e2239348e8bd2a883a54c0375d5be76ea72415b755f5cb182cf85980565ee6a789b1d2d9b4b25c61e21fd4c0ed9bf24643328c730f3c3442ca2e6ca0dccfa888ece33c07abb49c144a325bd8071482a871d1c237c68d08c31acb689f9a9eefb83a3e