caffettiera.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:df:bf:ff:26:c9:ad:18:ef:f2:fe:36:a3:e3:f2:6b:ef:32 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=caffettiera.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:bf:ff:26:c9:ad:18:ef:f2:fe:36:a3:e3:f2:6b:ef:32
Serial Number (int): 337475032988253859263151529284663971147570
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:50:08:2a:ac:13:5e:c4:6e:d5:d7:ae:ed:61:54:44:44:ae:b6:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:39:d4:14:76:cd:0f:c2:99:22:44:8b:a6:8c:63:cf:cc:9a:03:e9
Fingerprint (sha256): 8f:60:f3:40:5d:14:32:2f:9a:0c:55:24:7f:38:20:98:69:64:bc:25:cb:5c:0d:5d:68:f0:f4:35:14:97:16:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate caffettiera.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for caffettiera.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caffettiera.com

Other certificates including the domain name caffettiera.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for caffettiera.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337475032988253859263151529284663971147570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 11:26:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 11:26:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'caffettiera.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712705881398296637397427556321398876075705019098936078370173007635462083650878322892999272044005966405507220155600185722898878786479850529309483732289066968248291704004069246148913801952974244003527966693058791535085685133464630896643385597075616621527211668530591008243457884779524189556152135611152589112944080193625663502559220151317044450608545973061937929826058083475131827876801679627690153758961698847472504837355042289385410250230771126487816320571429468213409129407398870033190036089910744922267898674731703581725329180562060915780235178655153561746791096025898586805980187171394739891535258217557226181182048123569406593979143433814960173963779550373932148262425541253951479131717520806368611349975269704557082432303753702723563023991798876765131311579802849535261660349187813123460426616302020129918904412653807668492484536584199615556779654605164109987891328281664185360426958952674820764077789261962025510965603735347542116015044350914499638007850101048629634487005492137800577379599174134394465009690259521534587347830850515807006029640394188855563253136470050671199939006180418929753641258871743786434364639219019046539992299667265000164932924357127884506242647602278750422246839487895626328665892839205394936072582029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0650082aac135ec46ed5d7aeed61544444aeb644
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caffettiera.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3365979b000004030047304502210091228d061e7dd13a475c6579bffba2ca3058be9f1382407c4188db795ef6c01b022034032cd235a5c86a2f5a2f44e892cc7d378b80a673619a247294c69e50aa216e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c336595960000040300473045022023cdce5f6ba3ef35b39c73cc53d9b70b19d6009a367db6dc676b0d4606238591022100d8430bfbd18a16e19bd276573757452d02d32bb32ab7bfa601e1eaa714f0712b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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