yumeva.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:cb:89:f5:7d:a3:95:e1:c1:dc:01:37:05:18:4a:92:e5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yumeva.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:cb:89:f5:7d:a3:95:e1:c1:dc:01:37:05:18:4a:92:e5
Serial Number (int): 338170939959450351874314397847753035780837
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:a6:65:e7:05:e2:b8:b8:9f:19:b6:a1:7f:e7:cd:c8:2d:95:fc:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:45:a6:1f:8d:d9:a4:3c:27:5c:1c:f3:ae:f1:35:12:f4:77:82:83
Fingerprint (sha256): 6d:a1:7d:ce:c1:5f:06:8c:f1:63:80:ed:40:2e:12:fc:f8:bd:fe:31:f6:35:1f:f2:f2:97:bc:53:d7:7c:d0:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate yumeva.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yumeva.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yumeva.com

Other certificates including the domain name yumeva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for yumeva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338170939959450351874314397847753035780837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-01 00:03:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-30 00:03:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yumeva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806582225628181716406542341842169561571692924604406436213972136149313530698573638933068220847004684890896015547642682625839481596025260964728733896597583937878572774116106141680065926157339560382914302465733149533119017831597529293778036731718557271547821721779301991032731183428127360564746081434288338401815666181244656075814185772551816542817876741393365184844964474040519715321712601688959534750642783952305154349989700172918822975907072381065065926381266633087347259113546617697362483477847029423602343176779821276099881748280138858417652617010854253400316409358387560079692792209251586283363699185797366291673171115341916328690104661617846576761530452096797566903037880556084800459190048931505548901192970263056265331924108371726631039799819870320228255383381733954908465102784235468866825261650561269521527233545188378719980758509758748722784099507326250691394183918093120127550324491678120794316926946828960624697221150958679454817534078121278463348003957955796623100549991925909443384950374997749880628891498135822817457411396661495940036789340924789314238427432244171719779262340771573964933129424072790310161607149230575210078597177080931832489302078370649958476543064642010827901626899563282180080697739534837463962587071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15a665e705e2b8b89f19b6a17fe7cdc82d95fc60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumeva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001662d26ee270000040300463044022019ab81aaf802824f2c2548f5724dd7916fd301b48c539b252615a2dec1ae0630022025714fa1b580d08527dbd42d6e32e9399aec280ff2fb141289dc4574759a596c007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a25000001662d26eccf000004030047304502206650e6616a52bf2b79434e3f8fe9c2962f636099bf1b7f9f4fe8739acbf836520221009c50a1a4ff9aa52b9347d3cbef2b78d1adcf5e0b0a6bd4324c78e934c58e0ac1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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