capitani.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:26:24:ea:c3:ef:c3:c5:a0:b9:ce:d6:4c:ce:f0:c0:7d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=capitani.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:26:24:ea:c3:ef:c3:c5:a0:b9:ce:d6:4c:ce:f0:c0:7d
Serial Number (int): 267512642747991908875103029617521713004669
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:3e:93:ed:9f:e2:99:af:70:f2:aa:57:14:97:1c:ed:a7:59:16:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8e:bb:05:41:fe:d9:b5:ad:f9:11:1c:a7:15:b1:af:83:de:5a:a2:4b
Fingerprint (sha256): 87:f7:75:1d:ea:ee:43:ea:16:19:55:8f:ca:5f:ca:73:16:02:a7:bb:29:30:c1:87:ca:5e:39:14:19:73:7f:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate capitani.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for capitani.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capitani.net

Other certificates including the domain name capitani.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for capitani.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267512642747991908875103029617521713004669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 11:22:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 11:22:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capitani.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672894821742784964449675337187959506989507192158376630882537010663244892122422647505524838073886114774068211401588314660678061844623437912490266320949592415389694326876970130233984888575078880825913584154307655015131744011842440127725077173592959147589388509916642558822851399916346667780132912604034076037128061292977548181069125513604758866155075579780176470515122398967000619716259375735376460134872613944562927328165179154925879366115016353759732670468278077903846116002844920237617059501313404141990387080108666790017467219098394980696585284447085978589704922684683341386129441734724641368904056853610105185264217191542981473572283309378039834308038051746256032288912195321603732386305363360317444045122766043601484250584281650275759584003192413438128356240323182961564562757928276214711494822085623293284856609034951481764815150550146130568712193036240553023395583726616528429432507027500519200564196879660668001231014463118148488550410748032910476603165438757868444228166784935870659433263526592653079654648159297987818584342859948910588965988920643660406978575392326252841511244045652654337148301978768999053789432736884404921265182857224634529725454349004770891167486751613645403316983332530694579358168833052513919148830571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							153e93ed9fe299af70f2aa5714971ceda75916fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitani.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3888161a0000040300463044022044853a095bba33e0175081c04d025389f8f34d769564194915f39ade0cd7b3260220599596f4eaead3937a1040278779983f1010760674d2794bced8b03b957942aa007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c388816360000040300463044022013d73e5f798b377de87036379292dbf3ed5f044a428b236837aae01276cfc28d02203869f25f2b258d4611b2f058f293fff8072fed31d6f94c53e5911bc39d3ae9c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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