farming.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:40:d7:76:aa:ab:d6:2a:32:23:62:9c:08:d1:24:4e:40:db was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=farming.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:40:d7:76:aa:ab:d6:2a:32:23:62:9c:08:d1:24:4e:40:db
Serial Number (int): 370513615381728041484966489211020640141531
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:46:de:ed:db:5e:bc:0a:d8:90:b9:bd:fc:dd:c1:2d:f4:44:47:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:41:1d:56:db:72:b0:7e:0b:59:19:a7:ea:e1:7f:55:e0:2e:ea:58
Fingerprint (sha256): 7c:83:4d:fe:8d:dd:c4:16:9a:18:01:9b:ab:d8:8b:84:7a:1f:c4:9c:43:64:17:16:59:1a:fc:af:20:f8:a3:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate farming.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farming.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

farming.org

Other certificates including the domain name farming.org

(limited to 100 certificates)
farming.org
farming.org
farming.org
farming.org
farming.org
farming.org
farming.org
farming.org
farming.org
farming.org
farming.org

Certificate

The complete raw certificate details for farming.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsdKZDu7RYtNr5E1hl/nx
pspGMrYliL76NYsTY5ZTeP62I79eizzGlcHfFrjZ2L/jRnGmsvZb5IFaPIOY6ekO
jA0ZFby70yCPXV50bd+/nQbVtatB9iJJA+ISCsVVu9+ZjyOx/GI9swP4W3zvymKG
El2JUiHnl1LY1jumIF0/gLO7s9nS80kyoLcGFTGgBOiHpvniCl/k/xfCvCEop7i7
u2jzasUPG1zIPgTpbm7lat4EgUF9j4R+b3rSMIm13NPh+5jhir/dmEIvhpNFG3Rf
eLUOC64+i6DwZK3lnFxGOYwGdfpWbARu1DOIXAehr6Jh4VEUW+KqG2kRbYk+7tUi
U0xfGgPGcEYjUaaCTjybJ81HS1f81cbD/2fcMjU02XcfJe72hx89q6rbu4+OmYOG
RrzEBOmBqtE5bwdnyonM6zchQXsKA8qb6BLzYXR7lEKdXKFOm1A5vSbUSausQD7s
1IPWRhi4wq9df2g0zzhp2hHuQJiE4BEFoQmVkWDiobVDN8SK31HhJOZxsdnD8GkN
jRqXd2ApvvA83FLE96Vmaqmq9DK1m2dEQtiMaYHP20sAuVQ+9IxJiSzgks6E4MZ2
2h5mVs5cSA9NYKNwZKykIyjdPPcKQXjJRrlmp31f5ePHcyG4q/CHO2j3fbCDjsaF
wHnqueHarFvNYJ6z0dDWSL8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370513615381728041484966489211020640141531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 12:34:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 12:34:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farming.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725453111010803038033336515152190578302414876151721141526640212285673560975704650012220108827075636267550565036482377441509333395367434685939002712973982879618781445339741871493743239241041934659196079476916886545946584668553749590176992330801740623914038340469077474750270329472572832027924253502596000651247470811063241272146710009756478818799607755943512404376565164662048541721004922059458147361435150957993247364256280245369878360946670906765800463366215886446358974742548464551259051206632319179362367080913487077396712830779802743961949474640551979405297432254469508743293251612463629235896289288826967365680810423476566800343131974584862449452481286433206372185123883985297474345454089904207393882665499094328444298444386167317330176220534235006624694679072579883917527229663246664022092555907977055391200331073023563235902898795162431691599386473206879712071673782506658381524198035929573945416819853301188324396659914852998293914565646896186086795638123394422069040828048282946380093356086280834120394625292532091963352690402302924933106882265132281422703811823843830301890826717211601882990388066786852191358358095958088071074835255819032156307235733731730469085861959220845822996149642364492855380989085120604938014443711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d246deeddb5ebc0ad890b9bdfcddc12df444471c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farming.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f633600000016519bf27fd00000403004630440220627d0ee7b0630d543a6d734e20624ee98368f9a776d557f1a7ddb1d6cc6fe323022057e1f8e13575fe903c67097fbd0522a90943769b60a07230de018a15868bf49c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016519bf27f100000403004730450221008d4efeb0d957432fc0757aa03063f45e6acedf6e6e49bc019d8bd21056499644022005f12a17a9ec2794944b81acfc7f4aadd358a3ed5530658813328d67b5b643aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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