www.capi.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:6e:53:c0:8b:48:cc:ef:8c:3b:bd:fe:ad:f7:8e:2b:f1:fc was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.capi.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:6e:53:c0:8b:48:cc:ef:8c:3b:bd:fe:ad:f7:8e:2b:f1:fcSerial Number (int): 385991529758013991417939518268014534062588
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f2:d1:10:69:d1:37:ec:22:df:7d:64:6d:07:e1:75:60:51:4c:8a:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): df:48:90:6d:f7:a3:28:c8:37:77:60:a7:59:90:c9:db:52:09:1d:73
Fingerprint (sha256): 60:33:c1:2e:78:9c:41:87:51:d5:46:be:0f:23:3a:40:89:51:36:62:8e:6f:91:df:88:37:a7:c2:92:32:7e:96
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.capi.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.capi.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.capi.net
Other certificates including the domain name capi.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.capi.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgISBG5TwItIzO+MO73+rfeOK/H8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIxMDMwMzRaFw0y MDAxMTAxMDMwMzRaMBcxFTATBgNVBAMTDHd3dy5jYXBpLm5ldDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAL65TF14/uUwjgJ2KWFjKRG7M8eVjhHUJhRP CqQv0sNAHuZuD/2DRUUxOdO425XlR4PXxnmMgDJcAWQ2x40SQKxPK9CnOEYsu0A3 ff+8kmrRGws5hRq5OGs4ZJGjQZAIqCM0ATmXc3nFX8h3JJWSDnJnDcqbdgpH5keN yMNcao492nZcJJ6uwpkXZKurpwmEL307MELK/i4lUtA66wx4/sGg89GCSLRoDyRx Jyiho3s/0cyLpi9NVqh0y7S95ItPIbl23TbQjdCSVxWfR/3pjQa1X6C43AJhekZ4 y4/6HVJ/E4HF1aZHqJr5CtJS4pI12FWqJ49NHDwDGY0UmwPev1H8X17C+14ikyhF D6SZlAvrBhsdn2ySLzwnVq7wfiGcYKit5RwQ+PWSQDpGSn9mf2SktkYiSIZG2v0H 1uDqEa3RhPz/UZobA+aXOlSlQNBZnSVkh3WOm3Hf3DeAHAcIuXU3U27GUssOcGAL yxx1Cl6gysJE7rN1bzGhzoFY13Xtm0SGCCjkTYwbqq0xNaYW58GxJ7d+1YOnpDea mxtciF4oxJdW1HScNHb+VST3nWkLVD1YNFg1XDO88/a+xkbuQGiymFG+W7YhU9sb fBpJcqQ1JpTuZfKvSg5aEhU4/QLyWR3h4ZUsB9yiTbSRWVFdzAwngml3IrDcDDhD CawcntLBAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPLREGnR N+wi331kbQfhdWBRTIp2MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMd3d3LmNhcGkubmV0MEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADu AHUAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFtv7wLXQAABAMA RjBEAiAtKGcY9L6GRP08uVzB39cOs6luy3AAtqxvvolcxyhsOAIgIcJjNBTbmvxV JrHTmEZYMjefTYZbh3DoYcV71MO7nLIAdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6 cOeySVMt74uQXgAAAW2/vAtWAAAEAwBGMEQCIGjzEEZ3Fa1tsPpwzxZFvKj5CA5R V8Ec3QkhYfG+CV2cAiAvzGVtMO1SrRdYhg9OJZQHvoSHdw3FHDQNpbw8vCWN7jAN BgkqhkiG9w0BAQsFAAOCAQEAJqWPDY8ptPTQ5d/XViRiQK2MRx1yJd1LqYlDgi2w A8xlHrojWKKjlNnhfygzBr7so43LUwpT3BTsV7ImGXoOk0BxQz7XHEFzC+lCfJ2h Pa5zeayz8iyOcR6fOU8m1qVtMnBHLvW/p3k/P/oQL/lpx+ZVrYXigiOloU12svmG 2QUZ90VHxY0zAqDePIjDSvscmA5EZkn1xbj0Uk/fSZk32XfcuFCWa4M/XGuii+PR lnMFgvYoQIMxcKUBJaP4gAM/ZXZr1zwstj6GG41AQjzd3s8DGK/pyQj8p0qlBYFR IGEzYvwKcv03z8TTgcpSQrscR24L4hY89k+IKApfq7WMyw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvrlMXXj+5TCOAnYpYWMp Ebszx5WOEdQmFE8KpC/Sw0Ae5m4P/YNFRTE507jbleVHg9fGeYyAMlwBZDbHjRJA rE8r0Kc4Riy7QDd9/7ySatEbCzmFGrk4azhkkaNBkAioIzQBOZdzecVfyHcklZIO cmcNypt2CkfmR43Iw1xqjj3adlwknq7CmRdkq6unCYQvfTswQsr+LiVS0DrrDHj+ waDz0YJItGgPJHEnKKGjez/RzIumL01WqHTLtL3ki08huXbdNtCN0JJXFZ9H/emN BrVfoLjcAmF6RnjLj/odUn8TgcXVpkeomvkK0lLikjXYVaonj00cPAMZjRSbA96/ UfxfXsL7XiKTKEUPpJmUC+sGGx2fbJIvPCdWrvB+IZxgqK3lHBD49ZJAOkZKf2Z/ ZKS2RiJIhkba/QfW4OoRrdGE/P9RmhsD5pc6VKVA0FmdJWSHdY6bcd/cN4AcBwi5 dTdTbsZSyw5wYAvLHHUKXqDKwkTus3VvMaHOgVjXde2bRIYIKORNjBuqrTE1phbn wbEnt37Vg6ekN5qbG1yIXijEl1bUdJw0dv5VJPedaQtUPVg0WDVcM7zz9r7GRu5A aLKYUb5btiFT2xt8GklypDUmlO5l8q9KDloSFTj9AvJZHeHhlSwH3KJNtJFZUV3M DCeCaXcisNwMOEMJrBye0sECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 385991529758013991417939518268014534062588 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 10:30:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 10:30:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.capi.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778085306969246985545537421459885604680670034463196548502744474646708293797410083037612479474783176999429962873622070662952290148808071077300550398466961176058201010981649194043484047670532328694710267366962042600826059890386505067633547236009770839639307034151908818921287431327269324854716899296933884797622816856423090533444527400035474900401305825678788747635702736937322950627145776068440741607902926172564468881837331071245494322219503756790853307266739024089847979913392068775476643344278598484490912523697370210430922085521769025961948290290016892234692571260609340833617269731471756890477898095604662888955329293795326590086444605038759669161498577676785765418160958835457078075667339459387855025285196833718980341682905882564695616294303090105557606147122009054050697331102732135073484906413103931227503163890598484732487205616797150958739923802668782998873569195287717183601657807906023423709794595745871879920978210241575238592708643400148044151844832181116896961641582437092835898460816111804424723554788321790042099549461448628882830928284279798215584214352233795666151505733364823415515818101404155279169730971688211869963503976016220808341919650391734673003868026749574200483447337376131166788481760285170964061147841 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f2d11069d137ec22df7d646d07e17560514c8a76 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capi.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbfbc0b5d000004030046304402202d286718f4be8644fd3cb95cc1dfd70eb3a96ecb7000b6ac6fbe895cc7286c38022021c2633414db9afc5526b1d398465832379f4d865b8770e861c57bd4c3bb9cb2007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbfbc0b560000040300463044022068f310467715ad6db0fa70cf1645bca8f9080e5157c11cdd092161f1be095d9c02202fcc656d30ed52ad1758860f4e259407be8487770dc51c340da5bc3cbc258dee . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0026a58f0d8f29b4f4d0e5dfd756246240ad8c471d7225dd4ba98943822db003cc651eba2358a2a394d9e17f283306beeca38dcb530a53dc14ec57b226197a0e934071433ed71c41730be9427c9da13dae7379acb3f22c8e711e9f394f26d6a56d3270472ef5bfa7793f3ffa102ff969c7e655ad85e28223a5a14d76b2f986d90519f74547c58d3302a0de3c88c34afb1c980e446649f5c5b8f4524fdf499937d977dcb850966b833f5c6ba28be3d196730582f62840833170a50125a3f880033f65766bd73c2cb63e861b8d40423cdddecf0318afe9c908fca74aa505815120613362fc0a72fd37cfc4d381ca5242bb1c476e0be2163cf64f88280a5fabb58ccb