home.wibeee.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fb:5f:cd:b0:4d:86:a7:be:d9:98:d2:c1:e4:91:f7:db:43 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=home.wibeee.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:5f:cd:b0:4d:86:a7:be:d9:98:d2:c1:e4:91:f7:db:43
Serial Number (int): 346875076548738193456252307173600220666691
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:8f:e9:27:8d:a1:a1:84:c7:7e:cb:7e:16:78:69:3b:73:3c:c0:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:67:47:8b:73:4f:0b:79:5d:a5:9e:b6:09:35:0a:8c:c3:15:17:fb
Fingerprint (sha256): 8c:28:07:0d:73:52:a3:d9:f4:d0:ab:09:74:39:41:b9:87:a8:b3:51:80:2c:9b:e2:79:f8:32:9a:ed:ca:7a:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate home.wibeee.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for home.wibeee.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

home.wibeee.com

Other certificates including the domain name wibeee.com

(limited to 100 certificates)
iot-ingest-data.wibeee.com
*.wibeee.com
wibeee.com
home.wibeee.com
*.wibeee.com
wibeee.com
wibeee.com
wibeee.com
wibeee.com
*.wibeee.com
www.wibeee.com
wibeee.com
wibeee.com
www.wibeee.com
wibeee.com
wibeee.com
wibeee.com
wibeee.com
*.iberdrola.it
*.wibeee.com
*.wibeee.com
wibeee.com
*.wibeee.com
*.wibeee.com
mqtt-ingest-data.wibeee.com
home.wibeee.com
*.wibeee.com
home.wibeee.com
*.wibeee.com
wibeee.com
*.iberdrola.it
home.wibeee.com
home.wibeee.com
*.wibeee.com
*.wibeee.com
wibeee.com
wibeee.com
wibeee.com
home.wibeee.com
*.wibeee.com
wibeee.com
wibeee.com
home.wibeee.com
*.wibeee.com
home.wibeee.com
home.wibeee.com
*.wibeee.com
*.iberdrola.it
wibeee.com

Certificate

The complete raw certificate details for home.wibeee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISA/tfzbBNhqe+2ZjSweSR99tDMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjEyMzAwNDBaFw0y
MDAzMjAyMzAwNDBaMBoxGDAWBgNVBAMTD2hvbWUud2liZWVlLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMaaK9HxGpRhIYh3zP8rWAQpUdIbkcCl
0BGzS8DyPWbRWjBRJfNfAMVI1lN5bgcOyx9rvUKQ+jILZS55q9ffn60/fy65tqWW
TxoA4Q0d2P6r2MPNKxWgQ3KgKjZtPnO7Y/RzdCXHPeAnyTG/m9j/Fu5fYv2kFmtk
nEYSVdMGg0sk+/u2AX+Dq6lVzFYmPJ5dLPLtAFZ27vqEe1w+rfLekAqw/n7EnMMq
Y67d7D3l2p/ZNzS4DbDfdhXyIKUJrbHKlJ+ILgwjE1dKu5Dm7Rgg3UPXgVZt0N/i
Bs8LbCSlpAtLi9ooy8yP2kUXsyDjT2d3CfzAAz9IN9aVi6duwKbYRcXXp13r59X+
C196UmasVodSIPp5zCmcxOoZXmOIofY9pWXIblEaZpbJ+o5WAxfIxImw/CUgw77g
ycPZCF//ezQ2Qph/etPHcAl15jbVW37q++8bdT7QNimF21CPWvae9jGVriZOVUn9
4o8MqiZpN5J4137blE3JwQbMPIfgM+LHufjNPdfsGSAK7nwF8Ru8Tksy9QdMvUPG
993BH7WGUZtJbddV4M0+IQVVfyueGqIiO9lrC1KLPceMmrWdnYQqk4HxpvfGI0LC
CTfjZPjqSYVDc1xaGSUwTxMcmab/Wq3zGADf/HDCQ1kitDJgI8wO4Q/d9XKexzj+
W6bo81QEHzp5AgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFImP
6SeNoaGEx37LfhZ4aTtzPMAjMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPaG9tZS53aWJlZWUuY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFvKufu
UAAABAMARzBFAiEApKvfXPi21RDbx0V1dTBz7a/N12LjnF9y0ybvJE90lfACIGwJ
sWjE3jr4VgRuHLUOJpnozYnfhtbF/TNk8kfnrWWWAHcAXqdz+d9WwOe1Nkh90Eng
MnqRmgyEoRIShBh1loFxRVgAAAFvKufwFgAABAMASDBGAiEA0R/fQpQEEwBB0ZTU
1ENwFcTAtJUlPCxm1K22K5T3FIECIQD3WF09e44zkTyaCZ/iIFfbrCAJS1rm+A/U
pWJf+iDc7zANBgkqhkiG9w0BAQsFAAOCAQEAA8wOlQB9Wmdkfm+afwUwNFw5x28X
cVQfQsV0K8yBnA4ZyMpxWSfJwj+JmiIWAwgxNySek3yyviXgigRKQ9jpq1vt8/uK
mrtJpM6xgOQg0zHUFFFyWWyICzs/EneyrzcV07fNynJEcKt8SQ+BzIBaX+vsbbkA
IQlOh3yYCSb6O7lK3uCdP+fOUoRnxtw6tmVekgc7V0R9++s1duIkexAfbQqNACLV
mBIM0oS5kqFI/XK/NCqh1Nq5YsXwGLB/mzdsmMZIXlv0Xl8IWYzI+DztXaovk6TN
PGBbs+ILZc9PeGZhiDp00YXRgKBedjykNYpt42GaC6dwJlWwdZL6EjGdSA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346875076548738193456252307173600220666691
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 23:00:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 23:00:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'home.wibeee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810226414171724792234684746663688962283988116304008706251464490560238795366049752128442763401027042193246849138821563338732703945660549714522381333131995002244469958171164657809643517680624745826939625256627348287030175965665716876526778382899311479149363769052591687593709734861073815119977089342034269021152699268096046658390089677513610696709575678411886120840053683656814127429485456712174169601971165414664764153097886123775130448074024876271020251595351867218848953327341996025109605866168818520139529929413014094926723204577523428604734534491359085998220102658616028348867907381848068957446632684630147843970704283669253198141721391119397081971107041393154070231742307028885113103769025788342573058012826767711960211201579831258925728307429926284746813283362252197830466208121707471300064253433088534352087581328953957397963911290490171720011130823370971086388185647208403540191775701987641310293678927695189628641565757790319451125326208507091547498303039835184381130545251663652619749166413559734557981204965421604430584426220758192810538304352585268054180077748994368964495273834181094490085482179772082406649325207181286390233130721409357018581196229382786200977215713299672546557148506552538424996752043528351654522862201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							898fe9278da1a184c77ecb7e1678693b733cc023
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.wibeee.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f2ae7ee500000040300473045022100a4abdf5cf8b6d510dbc74575753073edafcdd762e39c5f72d326ef244f7495f002206c09b168c4de3af856046e1cb50e2699e8cd89df86d6c5fd3364f247e7ad65960077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f2ae7f0160000040300483046022100d11fdf429404130041d194d4d4437015c4c0b495253c2c66d4adb62b94f71481022100f7585d3d7b8e33913c9a099fe22057dbac20094b5ae6f80fd4a5625ffa20dcef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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