curomatic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:32:b8:b2:d5:ff:06:b4:3e:16:9e:f0:35:39:68:0d:28:7c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=curomatic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:32:b8:b2:d5:ff:06:b4:3e:16:9e:f0:35:39:68:0d:28:7c
Serial Number (int): 365708768593511655308450175419851962394748
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 89:af:f1:9d:36:f6:c8:e7:09:a1:95:a4:09:35:e7:c3:50:fd:64:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:cc:b9:c5:e0:40:a9:86:66:98:88:64:36:18:56:71:70:ba:02:a7
Fingerprint (sha256): 70:59:ba:c0:bd:f3:0f:d1:c4:72:ff:3a:8e:fe:08:33:21:ac:1d:c2:93:00:cb:cc:74:e8:96:59:4c:65:0a:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate curomatic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curomatic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

curomatic.com

Other certificates including the domain name curomatic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for curomatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365708768593511655308450175419851962394748
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 13:21:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 13:21:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curomatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753129789176613882751484049189179808780180068254410256034283515867827348471795024918125443068218918416965832806708129370296847153907045713900392785651276212392776469057587776695126353612344878625442782222456271385135628120951855572283823458386409527208992577494472225329926457906923195402627955674001857979488666712860303626002267021172083612184175751373726188135556399601814037790677584010604273409135066569715933330225041421158713591097646870778689043812702499764480025340900962346677608682428462761959104279777878972640269507911805128477911274379261288034220794346659792706485562062603240777903509124994587253559227587073420195897721568338875523713831000219711107760433818527668572626940459704534350629145400442756498885458204304960813518897129675762442908663094429290822863438198936807940134889499735417692002342499799603915606951359779282460151507187406378370076961906374050764426530146671820969906148402390154411979283333242135486091973740109966760651395723830212011050003184378191556928364858189399821247679302708156424610606180151824867894556665762150556214336922546418079428194096563132309837780650545701102492926945323330912890679462154609802473137560255734176857040996343934078195130787282198856657549759686204489094059091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89aff19d36f6c8e709a195a40935e7c350fd649a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curomatic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d20b321610000040300473045022100d1fbba41a328dab2f0f34eb80fefd3a2ef071685d6e0735e7390d180bf270b970220311f47aa592afa6b028d82f929b64e5110cf61c217e92179c2f22a3d67be09b7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d20b321540000040300483046022100b5a1192494f17677aa78fe1bd9cae84321d5e9a708f7b52be6d3d8c5d1129f13022100c1c0768bc2ad475868015b7aba0b6f85a91aca3e6f88a9969fe9b1dfc2951362
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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