kuba.life

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:95:f5:3e:d7:74:13:6d:67:05:e8:0e:c3:57:33:6f:e5:08 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kuba.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:f5:3e:d7:74:13:6d:67:05:e8:0e:c3:57:33:6f:e5:08
Serial Number (int): 399477203549547895302090266971588917191944
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:e9:dc:42:c5:bb:f3:07:da:28:e9:e6:c1:cf:7d:a8:6d:11:f1:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:1f:17:6f:43:a2:c0:54:38:0e:df:c2:8c:64:49:3e:2a:28:59:42
Fingerprint (sha256): 71:29:d2:41:05:78:b2:c4:00:1a:1a:ac:b8:59:e5:a8:12:93:be:65:3c:01:1e:5a:4b:39:eb:ee:65:cb:da:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kuba.life

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kuba.life

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kuba.life
www.kuba.life

Other certificates including the domain name kuba.life

(limited to 100 certificates)
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life
kuba.life

Certificate

The complete raw certificate details for kuba.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnNX+VCn+SsA05NNZR4yp
q+QI30Z/oS0+d3xCc7mWQywJiOHfct2Y5GhVg5icnR0BkQcNOr8TimvtWdv7bqfX
bFnx2JaiYaq8pHcN3GX94KC6cchpEW6pX5BnY8ga48jPq8KZ4n2Q/JCfbKoMhaCb
SauAghLS0Jsw0bJfAf6E2xA3KWjzXa28eAzuUp4sSmlCNEyj7MEQJyR9c8ZyktuN
lBKL3bDEV7C8QN0GyuSaVrpVtqSSWD+4CS9+AS7RpOv8Q99ylbwM3tFTC1WZI32j
M49hwx3Tjg66zsDoK8XbyCDXzeaBmmvy0agglJz3OQNlXpLSb1NtFcbiv+c567Ff
GW9k8KOtfMZFFz5QPCZtLhQIWeAvVGygEj8+jII4PbMNzEleoE8DAp8arJ7rACUj
fOG96NR+GMVOkYTZw0q8/VqhtLFK4A1xLO42YfYcrR4O0C1AoRSkX4GZGKfmntUk
ClWo0ZEhcrFiARvNJNZAoumI+KgUVCX/XJVH1f42pwvAdL1Lz9eQ1qtE8xXOgk73
Plx2uMS9M+kk8e3/UJTwCdmbV+kOIrXo/HYVVl9ILIYezmuaAKirv33oYLQ3q2OW
IpWgEvt9L9PsbdIZIEviqnYCPuaHWQEtIyjv/7egueg3kubuccalqwl3RC3kOhkX
ipp+blQwqYeZhvJehmmblkUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399477203549547895302090266971588917191944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-11 10:51:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 10:51:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kuba.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 639834698039203637424357747739783382438290202148492494848862287759201862575260696085200103944285088076082194937880090068132151841941798657547660263735639190917978236298366388755043949642621687858807791138535553690675261283532334794780581107673292518640182110403610576865230916632927680132839254326294254315459283958297111902463162376587469314817903976999891255620400234654786566755491364251388153967532212846150146521847030476716367460220899167525750554773255907780528961679519937634918009321695598168180390217849088101222723969972538573212141904954899217489260103159504186936750908575745780807808399885811236108301262239757830980978132025108061946371896509410349217679312080965940348854556887903933494718072357007816480755760998964145119911985220584782808155680094846804322202147980730976782235684754711775852658407271929308414163543137185781096704691537266910746113810792885748529171857906475801622959946984507168459471676259075087662984031600341565362363156014617112322734952308822911790928041138700099093827717934004616001425656674878635635008916253005710171447468428760950358290524670628801986312651472971003069934111082626983428700966203021267321280414806896092023290511411724022623023259579462877295602702974143434804562728517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6e9dc42c5bbf307da28e9e6c1cf7da86d11f133
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuba.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuba.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001634f0b04d1000004030047304502200d39dc6e2b43d95e4b6279ca703edefebe7122bdfd0bde5cd415e3dbacdb4da0022100b074151cced8ea91fbd736a47795ba025363b543d4a8d6003ddf14f17116869d007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001634f0b04eb0000040300473045022100c3d5142b89c79d1ef5eef437b2080b50bfc2da17ed3b43f6569572e7880dbc5502201e3ce5d45e77ef776b1bffdfef55ea16916f73afc9efd90210cddea9e5257408
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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