lapia.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:6d:aa:34:ca:e9:48:3f:98:0e:99:6c:67:29:5d:0e:d7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lapia.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:6d:aa:34:ca:e9:48:3f:98:0e:99:6c:67:29:5d:0e:d7
Serial Number (int): 283600981257909832383864102549245642215127
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:20:93:af:8f:c9:68:7b:2d:f8:c2:b8:b8:43:82:20:51:aa:86:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:df:a6:a5:84:a5:69:21:24:81:9f:d3:6f:9b:3c:3c:cc:91:a0:60
Fingerprint (sha256): 85:ba:98:0f:15:bf:58:27:d7:ca:2e:cc:08:0a:16:1d:2f:71:70:7e:48:32:eb:c6:d6:f8:11:1e:da:06:2d:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lapia.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lapia.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lapia.net
www.lapia.net

Other certificates including the domain name lapia.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for lapia.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAupwBFoFXYGnLvF3CdV+f
Yefs4DJ5rMcYNzlpdnVPcYqrv9vpN8IzfCJnLAovzGWGMqJsygI3wExCjhY9VJ6F
+MYFeB6LsYO8NeGdRqN2DYmlZ9anrA5pZDbqFnIZKYmrowfv5m4cqm0SpoiEnEtA
KtXhA9QLAGLsi6b0IFGFuFxCbjRObZd3QyCy6G17JLdvDq2X7h1THk5LNTqpezme
ioh/RZJya2KKmSBztxXg7rGRQYvfRo83L8qyhnzwnBahPQRQlOj+MvR8RdGlcyMI
vQssVyvso/CHeLXOFuycps6t2uoWN/zAIiL168O460gNOodpKAaPhEiXq8aSMNW5
3dvi+Qh+Skjla3+OP3Cx5FxMEVXzIPXvcTfrAEQkbFwPlvdfb+RaEhwtiOjJ5CHr
7LhF/ijIBohWMsEsNn/WPrkjGCWbYS/ZOQFe2W2sjI4e9c4GyytgIrjHOs7cRCtM
B/uG2X5axSWaKcOj1e5jloTOT/ys8xSWIkieRomXk9I63l69/zqm9a59EQONMH9+
QTG+B+E7uwneiRQd78cjDv+l2R2zpXnhukBLoSJa3lpM8pW06VpC22qkTMMmGxeH
Jn4u5gahunoyvOtkr9zxW9JTkvE+cVq18gIRBt0EnerHlW8bBbqw6fQBC5q4W5Yt
BLrAL8w8uKCPIMSxiZggwlcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283600981257909832383864102549245642215127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-13 03:32:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-14 03:32:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lapia.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761299897478624785043415148245812665615026958958762572660740922431535718467187907784754416458966745551618014012965253806622744393457027926972713914870663635989359296592690692215531096090159756036349618804925449224651659114095528294287708420916663830303836624781007175342399384948364892346552339866489017598321801326435936264990339704374232428573315662505783337911670626750566583008129008927817574106516806607813362321301014611692805578404849118533876620665503348806796204516956860608577815495114047912334124725341970826036949213378443780181723089306517329416216119443560681441529021443413750978899196618010371414086674704881861050870462764825848925803029395677613085984858840518275581962790477647662313504400786405044415305638567285192684093591692531952970554851340570412948815751320545913552509499003586643147297323123515773645435822369616582375348892119322757616828313768203610200314675163483503106985188791717188885631401172050668739212706792210601685094965033603253671919586214289838445249474093012171357075239160349755352055138839441550398608794416122350151409439285204265801075349041896084230289487560140464721698267352417941116452558741456228580740104497306382117847462902818322719783143322747971549853154571023822111585124951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a82093af8fc9687b2df8c2b8b843822051aa864c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapia.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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