www.terramate.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:57:a6:27:3d:e2:1e:09:c9:d5:39:b2:1d:55:9b:b4:d1:f7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.terramate.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:a6:27:3d:e2:1e:09:c9:d5:39:b2:1d:55:9b:b4:d1:f7
Serial Number (int): 291162279319422012089096464018331135169015
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:13:c7:b1:64:62:2c:5b:8a:50:01:37:a2:b1:b2:c1:e9:fa:4d:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:eb:3f:cb:d0:37:c8:5e:8c:34:a6:38:1e:39:e0:dd:0c:85:e1:d7
Fingerprint (sha256): 8a:6f:e4:5d:5a:e0:2f:55:09:05:c3:2c:37:66:77:71:39:09:7e:38:07:cf:c9:31:99:2e:85:d2:d6:a1:0d:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.terramate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.terramate.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.terramate.com

Other certificates including the domain name terramate.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.terramate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291162279319422012089096464018331135169015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 11:24:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 11:24:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.terramate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708095458520997670676055965612649694095874584283669321709745394417628118856179693707592675765413803997223078087632780084872429902055108025708444426577144786806158977023823364254079347805933703305788960605505922361022137995903905471084740743071533109914846626411723221929189600508954442306360380080538123363377246715901016848346533736620436358468346598964665824421784067629368331749805495874917869950437280750864774331161451639841372333399983151853025716319004529876001453108968640357400190213266626564745171935284062347700350184604530525102811269876791774953367818935769919091579595983185970522893904642805881830710369416844695278284667723879115886248561025997660743408697904002659726538589458749916345096957300752131276572403375866287050188625058002035736715961386720605220092706469133689389499634481693299490128859763785172128638345280692284808516253971607962595418391551658027245088413871505927931714372132865830384631290031515253148350630206803637646757590849073459560458563782842289409512017236583147665790921630048882692716619880357041214613916805038204806544460409987635859066505565700662708774378264054582596821389529574896651830481004044990719297750200816303782317186557116471546632264392072011372204466481903121688182823501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e113c7b164622c5b8a500137a2b1b2c1e9fa4de1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terramate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbfedd7e900000403004730450220768866d94f148b871e6f9fbf5468a58bc82229735d10130312538732dbff4334022100d543288ab68c7105c9d38e408dd154225981a7790f32b0898a70b11af06a48ab0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbfedd8ea000004030046304402200fd1d1c87583183338d5f5cd22389c66515def2715098862539b48f5cf1bf77302200191a764fd575cf9b95a3ce090cf033bca908ec44b60d403370e80c5f2b140a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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