www.neofab.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:44:f8:6f:5f:eb:bf:67:2e:3c:7c:68:d2:54:da:70:62:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.neofab.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:f8:6f:5f:eb:bf:67:2e:3c:7c:68:d2:54:da:70:62:82
Serial Number (int): 284806285579317278870068817176149839864450
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c0:b6:c0:ee:2d:c5:fd:8c:ce:7b:d6:f1:bc:0b:07:fe:54:b1:01:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:67:c8:a1:b5:36:b7:6a:5e:ed:92:8b:d2:4c:25:7c:bf:16:3a:8c
Fingerprint (sha256): 7d:da:e2:37:fc:e1:2e:94:12:89:0d:54:32:25:37:e4:6d:25:9f:2e:46:6b:5b:55:3e:e0:77:3f:2a:16:d4:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.neofab.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.neofab.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.neofab.com

Other certificates including the domain name neofab.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.neofab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA81PM+x3YtlPuPsI7RuS/
DMNk+CVLvl3O3RQ0j8w4xWu3wV19Lyxa0eVYFBBIxmnChBtxd6NxGj2Ck3q9PWoY
Dx87vc5mK03rAuUpcJwZ5vyUjwH47po1L46hDl/xRxyZufTxA3nh4wiBpO6fFERz
A3d7BajhCwU1RPach2ezr07Ot87KNT9gaACblB6USGDKBgMxPq4Fo0LM5lX5S/uf
b/werGSt4i2S8iAY7jFo5YuN9iq3shIawzkBnYqGwoqSEyD1hHD6/xqxniOB/QM1
+N78nPNClSFG2hK9WtL+wdOMdWsiJFPtAcSS1G/ZS72ignhcY/U3NTsyMOZUT9pe
vkje7NknnbG04oCBoBQOy+7c4uLAcYrRqWn/O82L3LV6gJlO22CbyjR4gAnFQFJN
tuoKlziyjF6P3r/NfOu02/pp7YzT7tIUgY8uS8CL1qjNy+D3m3FNy+CQPiT+3g/n
yLDOWHZEqQaudZzZ5udo1oA6JBTAXOS52ivTIqSuHKccIRNjXSEuXXyfU6VdQYAk
ulTn52ZU8iSJK24MjwnOQUyrzZ79kwtisaMuVAX/LEKretyHC71tdXqn6iGr1+/N
fLzx0hrlgSgyliVFqyjzk9+Ejo8euaEIS+8x/PLq+JLSuNHf9XlA1VlC9Apkffid
R2c34PbNZ84Tg+X0BuTTK+sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284806285579317278870068817176149839864450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 18:00:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 18:00:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.neofab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 992688965779389009445293587255452579269007877501989057587581223861344583521506051349453169355933772495252702127332262956142252864899514526878669395679705569505173633136050422987735118871105291172089617738222830860874239240240471765807172208900898892782544182693029144942252355442222432615382430814307626326730676472743857931490772420224520539572989841267837162858279768045163603850864961464111115420288193979168153312699245859320354115890673223164285739729704197586758633118859868390518085477178896834243898827771477760454856488647910667475567487112049496677225463992511966680825499025971541226696551842096053901018538176932880009830794204434750898125027958148646776101171980578001495583789652782011900070274645001964169288413088896494604031076231525573390691399076305520859508416202982482687590718559744487356122485050662858031933056401714138269755824433679622220461048154776705414967673354218419385248572565625888210543390470998228741670687043483219359351413645894068618393520162912070222805901475616399925969158532261294303036864803425544463845154827005793068948682726067889208828088560242784947482280888959303455441067625953857007831395130678288585598395682388569486120466485987876155515751303174031157258388723756086109106547691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0b6c0ee2dc5fd8cce7bd6f1bc0b07fe54b1013a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neofab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f0aef20de00000403004730450220139c3457fcad737ba2461f37cfbf00b4e213a863ea3cfb6771db2755469ae5a0022100a7d1f711f4ce6c1cc4322b924df858fff73fdea0457149724bcdc34263206efe00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0aef2111000004030046304402203bc368fec04ac71c280e19064a4bfad69c1c55244ab51950e9b5ffcfcfd3639a0220517e7da198d44dd34d5894cc6e93cb2d49e954909bbb5f0721b73c186c08ebe9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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