livingforbreakfast.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:74:9f:62:ff:72:79:7d:a0:4d:ea:01:75:df:23:58:f6:ab was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=livingforbreakfast.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:74:9f:62:ff:72:79:7d:a0:4d:ea:01:75:df:23:58:f6:abSerial Number (int): 301021473635615598755256279895983515039403
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c0:08:08:5c:e2:be:64:02:96:85:f7:5f:30:db:c1:7b:de:22:e0:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9e:e7:d3:41:1b:39:16:d2:e0:24:20:d4:16:55:0d:90:17:76:c1:d1
Fingerprint (sha256): 62:76:f6:68:6b:4c:f8:8d:0d:33:cb:60:68:84:9a:c2:cc:88:9e:78:05:ed:2b:6e:d2:9d:8e:fe:74:46:e6:b7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate livingforbreakfast.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for livingforbreakfast.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
livingforbreakfast.com
www.livingforbreakfast.com
www.livingforbreakfast.com
Other certificates including the domain name livingforbreakfast.com
(limited to 100 certificates)
www.livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
livingforbreakfast.com
www.livingforbreakfast.com
livingforbreakfast.com
livingforbreakfast.com
Certificate
The complete raw certificate details for livingforbreakfast.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgISA3SfYv9yeX2gTeoBdd8jWParMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMjUyMDQzMjJaFw0x OTAxMjMyMDQzMjJaMCExHzAdBgNVBAMTFmxpdmluZ2ZvcmJyZWFrZmFzdC5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoykhzjVjoIiX+OjIhmviV VmZb7GE7uZJOMloJF2P7K33vcopFs38YXhT+rH0nxLBmpQEUOH3kEHCT4n30hEHi xdTcpaGk7PeDxMfgeJ3CELVLz53vMOVhExGysDICq3f6Cv/srPyVPWPWeLVTmHuT teRA+p35j+ReaKFdIRbG/z36PtjUBOq23PKqSl0dhXKKySegtuV/7cqGtu30oX9f 20PCvI7e8S+8bJ+QYCGy/JBXPZ3g2AKoXLHsYt8bYH5S8YJ2g1YjQBj4Q1/skteT FhuoBFWGukrBkORwJLLnDn6zq6OgJYGXWgbX0DF0F/2sO26UHwaIInr1OMT5FdQ9 AgMBAAGjggM4MIIDNDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMAICFzivmQCloX3 XzDbwXveIuCYMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wPQYDVR0RBDYwNIIWbGl2aW5nZm9yYnJlYWtmYXN0LmNvbYIa d3d3LmxpdmluZ2ZvcmJyZWFrZmFzdC5jb20wgf4GA1UdIASB9jCB8zAIBgZngQwB AgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl dHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRl IG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQg b25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBm b3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQIG CisGAQQB1nkCBAIEgfMEgfAA7gB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM 9OVFR/R4AAABZq0ulJoAAAQDAEYwRAIgf0FIjyhfEnWx7fD4N0uveKTePeLqJnNo BLOlQAkSPqsCIDfJyDzIAQHWDUGLCzCS23DP4RMmlKYRRouPjhRcc35WAHUAVYHU whaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFmrS6VQgAABAMARjBEAiAS sPgbXGs1YqeKeHueJ/b8wXCxlkwgnDVlJETquliIFgIgO3huM/0sNU8STOp7h83y OSOly9akgxe8Hl2kcFd2djwwDQYJKoZIhvcNAQELBQADggEBAGXrzVPAyHsdpICt HNgDxlD4bmwhL2WF4cVTiFvhdcaABrXaYNg8XIIx/JiaC7qm+QPgfJ+0erLvsMI6 afDQf+2Gi3T6Tkgt8QoqEAlN/eOAFUYRALT2BLZpZQPu4J8VSzDlb5dr3MEbZ1Dk TuVdytuc6fPHxkM1DBKaeqEt8pKfF+kTzobMG9YD0k9bph4N8Ydw/65rVnA34I69 DbwEdqZrMOIXoavTuBVWYYJ3laGf9D2ExpgXmBzRMKpD72fJ6krL8ERLtM0RuBOV mFo2UHgkq+iuOXFyrBHBEOccSMJotusPD+57ky4K8PX8cgy+XuPy/Nyaic3vnCem Q/aIccU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMpIc41Y6CIl/joyIZr4 lVZmW+xhO7mSTjJaCRdj+yt973KKRbN/GF4U/qx9J8SwZqUBFDh95BBwk+J99IRB 4sXU3KWhpOz3g8TH4HidwhC1S8+d7zDlYRMRsrAyAqt3+gr/7Kz8lT1j1ni1U5h7 k7XkQPqd+Y/kXmihXSEWxv89+j7Y1ATqttzyqkpdHYVyisknoLblf+3Khrbt9KF/ X9tDwryO3vEvvGyfkGAhsvyQVz2d4NgCqFyx7GLfG2B+UvGCdoNWI0AY+ENf7JLX kxYbqARVhrpKwZDkcCSy5w5+s6ujoCWBl1oG19AxdBf9rDtulB8GiCJ69TjE+RXU PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301021473635615598755256279895983515039403 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 20:43:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 20:43:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livingforbreakfast.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21307784705813431806554304619893833892295761463781528355736820557135253525630205758038134208286097178534351428404923636672073327496370274482377003305658419535506183251402246724354991703875218652076323890861544536640532566557576474882136659920188982714795745760221899651678233498138314149874061545046876857592644078993039405421935944465901377428675497752173327390303535180022475123249985132682260316220115960153213064140157232329602277393576981099715603838371605163714202996942614031625722482251015332077565134262566906827495326126206681570366804118082748475939691565182269795553211722839406796044373676373285954507837 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c008085ce2be64029685f75f30dbc17bde22e098 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingforbreakfast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingforbreakfast.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166ad2e949a000004030046304402207f41488f285f1275b1edf0f8374baf78a4de3de2ea26736804b3a54009123eab022037c9c83cc80101d60d418b0b3092db70cfe1132694a611468b8f8e145c737e560075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166ad2e95420000040300463044022012b0f81b5c6b3562a78a787b9e27f6fcc170b1964c209c35652444eaba58881602203b786e33fd2c354f124cea7b87cdf23923a5cbd6a48317bc1e5da4705776763c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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