cake-digital.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:b9:ae:5a:4c:e0:09:5f:7d:6d:7b:6b:6d:5f:ef:ad:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cake-digital.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:b9:ae:5a:4c:e0:09:5f:7d:6d:7b:6b:6d:5f:ef:ad:e3
Serial Number (int): 286764565417811321385861321608600625327587
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:d5:4b:01:d4:33:db:57:d3:e4:2e:91:bf:3e:c4:8a:1e:36:5c:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:55:da:e5:46:14:e1:27:63:29:66:8f:a2:76:71:67:c3:9b:46:11
Fingerprint (sha256): 67:89:5d:42:e7:0f:de:ec:79:93:51:0f:a8:a6:4c:76:74:fb:91:f1:b0:94:8b:5d:02:36:aa:a7:b4:c2:3f:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cake-digital.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cake-digital.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cake-digital.com

Other certificates including the domain name cake-digital.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cake-digital.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286764565417811321385861321608600625327587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 20:49:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 20:49:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cake-digital.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833765190776647926536814651718608002087302237353070740563635058357999835036509751409004156740698465938491749547992973503780670817713227529921659320602824544543792600545879432703032717945882269751953062859037985020784525145096179378955939744249613219747131999420607188121759936317215938747778842330430647788318255083808535859960645432979058925767512306997105189059645216743626015167805767316036959770115329248694224056117576052605629264135544021089376397588992824052883444679506428698558789041317285214601097272173739049675846535094879327603828432338827113264887115773754562190888734300890050935661920337526127372943157908021589102714741384448647619751931424895628416136101082342552959129040568205536149674058487722856527975852742924193631346708263698616878772727688757787865220641746508880768859461418300418691495614340091969195454270166976950104591616523744411285989922698398341535091451602674471086039476876423906232788731128500723572125736555752874966109900388005415632744792573689365781775826566478615765436214794379834093819396188175284584937914371929811864888560283957067873073984259805561658088601881834872776486523092310906902771161288048215091245089944303014540219543934950987862976024088521510880506907961184530980723269437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9d54b01d433db57d3e42e91bf3ec48a1e365c58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cake-digital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d8e735b290000040300473045022100d116b1268793a3ebdf6f8dcf9c5870c18d0d7bb0afee28b15d0d39095286ef03022011b95c6871f077dc810d818aab8f432454d9582cb0d6f23e8e301e001b5598af007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d8e735d140000040300463044022032a0345540e44bd3396cee3d4f1dd728a7a312029129d2aaa267f04d5793bf9502201867005898cfc3d5c58408c0c16a5f10ef8b13b1455e0d2e76970dfd00cb20a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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