www.capi.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:6e:53:c0:8b:48:cc:ef:8c:3b:bd:fe:ad:f7:8e:2b:f1:fc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.capi.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6e:53:c0:8b:48:cc:ef:8c:3b:bd:fe:ad:f7:8e:2b:f1:fc
Serial Number (int): 385991529758013991417939518268014534062588
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:d1:10:69:d1:37:ec:22:df:7d:64:6d:07:e1:75:60:51:4c:8a:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:48:90:6d:f7:a3:28:c8:37:77:60:a7:59:90:c9:db:52:09:1d:73
Fingerprint (sha256): 60:33:c1:2e:78:9c:41:87:51:d5:46:be:0f:23:3a:40:89:51:36:62:8e:6f:91:df:88:37:a7:c2:92:32:7e:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.capi.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.capi.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.capi.net

Other certificates including the domain name capi.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.capi.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385991529758013991417939518268014534062588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 10:30:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 10:30:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.capi.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778085306969246985545537421459885604680670034463196548502744474646708293797410083037612479474783176999429962873622070662952290148808071077300550398466961176058201010981649194043484047670532328694710267366962042600826059890386505067633547236009770839639307034151908818921287431327269324854716899296933884797622816856423090533444527400035474900401305825678788747635702736937322950627145776068440741607902926172564468881837331071245494322219503756790853307266739024089847979913392068775476643344278598484490912523697370210430922085521769025961948290290016892234692571260609340833617269731471756890477898095604662888955329293795326590086444605038759669161498577676785765418160958835457078075667339459387855025285196833718980341682905882564695616294303090105557606147122009054050697331102732135073484906413103931227503163890598484732487205616797150958739923802668782998873569195287717183601657807906023423709794595745871879920978210241575238592708643400148044151844832181116896961641582437092835898460816111804424723554788321790042099549461448628882830928284279798215584214352233795666151505733364823415515818101404155279169730971688211869963503976016220808341919650391734673003868026749574200483447337376131166788481760285170964061147841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2d11069d137ec22df7d646d07e17560514c8a76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbfbc0b5d000004030046304402202d286718f4be8644fd3cb95cc1dfd70eb3a96ecb7000b6ac6fbe895cc7286c38022021c2633414db9afc5526b1d398465832379f4d865b8770e861c57bd4c3bb9cb2007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbfbc0b560000040300463044022068f310467715ad6db0fa70cf1645bca8f9080e5157c11cdd092161f1be095d9c02202fcc656d30ed52ad1758860f4e259407be8487770dc51c340da5bc3cbc258dee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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