safe-chem.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:77:3b:5c:ec:77:15:3c:b1:67:a3:e1:09:9e:1e:b9:5e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=safe-chem.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:77:3b:5c:ec:77:15:3c:b1:67:a3:e1:09:9e:1e:b9:5e
Serial Number (int): 266939862027745198178536873944841308780894
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:0b:49:43:35:f3:27:4e:2c:55:91:53:1b:bb:3a:39:a8:a0:b6:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:62:42:a7:2c:cd:3f:69:1a:d9:0a:00:98:d7:be:2e:c8:bc:d1:60
Fingerprint (sha256): 6e:8a:02:de:29:13:f1:81:98:b5:cd:7a:07:b3:7a:61:d7:9d:8c:9a:24:4c:1c:75:b1:e8:1c:4e:58:b9:57:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate safe-chem.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safe-chem.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

safe-chem.com

Other certificates including the domain name safe-chem.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for safe-chem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266939862027745198178536873944841308780894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 11:59:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 11:59:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safe-chem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919969993802241164052593657656015485515913858109110804299788435522383406345414797823578227171693024907619644219953174399246387194454649816759746409699858853391846851181241762960946244112474608386248727985685463593363303994678024591159602890120736844396768954448702802395438257788840726722708633468559200249025152009869506250807833974625997643397281071751296443934653271332548737715722003699778961094922048121084528034317977159716957590781054366648722831557670215873008736291278405445803389814897335697321760788877244238459924515857167587147918472415413631552501670181408447196040751491113003494554172332736798395170522333242590346378299552835655832581839781322145404622680751347727370009897455064081123489331907151125865638350490458892142972903720467638547805822528510746511345907614724732368594306264622454068148557903668211893468122224606745105932371866134095251323292625210964388500577295473577432557900213885378285457531960643667620896097338275175353113687351843992151882465343901325200065638942849085950610983906582173937966684632637248864455648817197240548492542382257987856331676684432437845566125203890510299237827420749918483613565934303843704484513958403144746370746422093175769640836055244103261453891099928689785882434071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b60b494335f3274e2c5591531bbb3a39a8a0b646
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safe-chem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc00d07570000040300473045022100e8d748c50c4b25af601fff378a75bb050d09f05194828d269d650412e4bf46c2022070b20b65033f4996fe6c3894e11cebd87123972ebc577801df28a1c80ee1c212007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc00d07430000040300483046022100dc693d3f3291d9fe0ac9f8b75482031c7610fef165de687512c8ba72a6cc2fca02210087d95377f0a8147533d0de3355470789bd2b07d6c8df9229987b99e20f55d692
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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