www.lacassandra.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:75:c3:76:1b:49:19:cc:19:90:9b:f5:10:6c:38:b6:56 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lacassandra.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:75:c3:76:1b:49:19:cc:19:90:9b:f5:10:6c:38:b6:56
Serial Number (int): 308792641366171553021277124808862479201878
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:fe:3d:fa:ca:b3:8c:43:ed:7c:67:5d:a7:51:09:27:1e:57:2d:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:2b:73:58:38:db:7e:df:9e:43:1d:5e:98:1f:50:2f:17:55:5e:8e
Fingerprint (sha256): 73:56:81:22:bd:80:9d:40:38:f1:e6:e7:9e:a5:16:a8:56:1c:b1:fe:d9:e6:59:5c:fd:52:27:93:a4:31:70:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lacassandra.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lacassandra.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lacassandra.com

Other certificates including the domain name lacassandra.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lacassandra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308792641366171553021277124808862479201878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 00:14:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 00:14:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lacassandra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808910452948655805198508959052351504063269439974408593816076555426184874893952893911426849886206477749105742646328233927053904040184748996430305214016870080947163122582816175093933770832120277788602651750868224401940231337554815021479371661263329912698355598581004272445637760530228332556849907306384572184882478311738629384486796367003042826403134452893651511360098316610630153381704392990539215058641665822468253702326243781775336557229483725455425193765817775237557441662519586977102165508197414418113354725032068983852681534911489673017644852945678899407205365192620108009538737101420178245565867718085633264851502346761915990487990664596713067577860978588321703723091744982094108805866599118266400589018167561925469612675918606976189091165168968694250063725901279485974613246714870048660561586775999142876838146733155023268747938725908516336499656605360018620218573833922005982141973277312909535314003046606696946178180951244625967260854967080739714886680959101219876148026026671431979941274597957462255997717184840056822225018793815740137813438594562588328841046307607216765848057571435838022941138265024682340676539341747460493182040981402493167693406671866811346692312991398564694634506822496935162296525354751047505032233641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4efe3dfacab38c43ed7c675da75109271e572d93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacassandra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fe9b6f3a3000004030047304502200cf07b4fb633411899bd7ad17fac1a6fe3dbe915859aa301218a56a73da3dd1a022100e3c6054750c888e5747e7a6f5cc32444c95f9dbe6cf4713819768b0ac98714e700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fe9b6f3e2000004030047304502205650caede6b8458ce63856760915978e605c34cb85351e4ee2a09041a11ca77a022100a7a889b2a58832857fedf41d1124e68d4755316e417c322ce1684c1cf0ab31b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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