www.thermalcoffeemaker.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8f:a9:a0:1b:e0:fb:84:2e:e5:b6:27:ab:0f:5b:df:4b:27 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.thermalcoffeemaker.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:a9:a0:1b:e0:fb:84:2e:e5:b6:27:ab:0f:5b:df:4b:27
Serial Number (int): 397334993060970211455629423208908783045415
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:6b:1d:97:09:f3:f7:7a:d6:d6:fc:a3:0a:06:9d:4b:5e:a8:7e:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:4e:09:8c:c3:45:e3:b9:15:f0:f4:83:39:9c:8b:89:48:85:c7:03
Fingerprint (sha256): 91:6e:ed:73:1c:0c:3d:f6:5a:2a:c0:5e:2e:a0:a8:57:30:7b:bc:6d:a7:94:ab:86:b3:da:f4:7a:93:78:7e:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.thermalcoffeemaker.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.thermalcoffeemaker.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.thermalcoffeemaker.com

Other certificates including the domain name thermalcoffeemaker.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.thermalcoffeemaker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgISBI+poBvg+4Qu5bYnqw9b30snMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDMxODI2MTVaFw0y
MDAzMDIxODI2MTVaMCUxIzAhBgNVBAMTGnd3dy50aGVybWFsY29mZmVlbWFrZXIu
Y29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5+FmzZO12HYAe64i
lWXiiTmDINaHTNC/5biPhdslTDsWWLqZPT9IJEKS78ka5Z117JYgnWeVR7x4i52O
P3HuQfQG3vLcW8gKiAAyVJIA/Le/6EWnNSM6g8jtwSjU9GD1is/OCWXf5++rd1iG
QUA7sX1Xf7kxlwencg+2U8PsvvPI+Fvwe2kpmYSdkATlQH/el1MX5yO9FRcneO23
OjITJOqnh5+nWWI1TiGoBJqpE/awTjGatbXdlxWiM51JNnla4NpT9aVaKBwxCLxN
NgZRbx+2gBX1FnVB8ENTCikzEON36DTby8ZyQeU8ddaOwpSPI+QzHG1LADub5EkG
rzywiDPf2raafeeArv9pIL7ks2Nq99cfxr+t/XfMXa5+Tzkl3PSp0B3v3A78nRMf
b7kJijZJDvmlzjfEpbnyZ7cnD8Xei6SHwj0OCbR3FHVeyouNp0uXVjDMo6CUhrVq
Vubq8lTqfNxvKlbYaZjkhLfC2AcvA04cFwlmZT8hHH8TtDyxC5GZagFAnrG2A/Co
ZLJ0Ro5xnag6NECo7+xFBt7LvQLRV3VsCLiOIojpTO7jWOXNUCuGUHuLBl+4QOJ0
u5BLYzLFQPjVCG4ay0rYqyqNwlPuOkXW442zh/BCmVxhezMkY1bZ7OXowwR2ajHA
lL5GoxpFYkp3RZ+J9N1fLKwOTWcCAwEAAaOCAnAwggJsMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUSmsdlwnz93rW1vyjCgadS16ofh8wHwYDVR0jBBgwFoAUqEpqYwR9
3brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRw
Oi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRw
Oi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAlBgNVHREEHjAcghp3d3cu
dGhlcm1hbGNvZmZlZW1ha2VyLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AG9Tdqwx8DEZ2JkApFEV/3cV
HBHZAsEAKQaNsgiaN9kTAAABbs06OEoAAAQDAEgwRgIhAI5NqeJoE4bB3hu6wwGT
5X+JnZkxy4IJ1zurGlsA9/OSAiEArDpFqnHci8NzpmAw/8Log8SusoMrVf5KIRUb
bfzH3O4AdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW7NOjhM
AAAEAwBHMEUCIDCq7JCIcBP3OT4keT/pGxQ5DKGmlCwWsR/tpHWsd57BAiEA2p6B
HZJh7r/F4AByrS0K5JRIYfmPuFkHY80RUM+TtSYwDQYJKoZIhvcNAQELBQADggEB
AHdEyzdty7/6zQHnbrq41kmBIEhoVohecfG7drbeJ08UM38vIgkO8e2Kv+/+5vpn
Jv3r6OqqU1LMxflcflBrNBcCaCtSN3p2yx3zL0K1tjoRHxjwn/Bg5bb9v9Vr24B5
f0Bk9dUkyTej+stXhUzYnlmS6o4T/VWVixf15+u9K6PjjEayr0vdGpmPym6DmIc1
SBT/uJh890tp1ZRjeuAv/fxPXqPXLCGOrhIfF5Drx+h2sIpjCyJStwrBNXmHXafW
ZqFnaYbmaAeoijVkohVdTZxft2nasMxlyk6cVJRNohGCvIOVbcIX1X3nf8q0C1al
0VM0aPuzyZCm3QsOfuBuXXg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5+FmzZO12HYAe64ilWXi
iTmDINaHTNC/5biPhdslTDsWWLqZPT9IJEKS78ka5Z117JYgnWeVR7x4i52OP3Hu
QfQG3vLcW8gKiAAyVJIA/Le/6EWnNSM6g8jtwSjU9GD1is/OCWXf5++rd1iGQUA7
sX1Xf7kxlwencg+2U8PsvvPI+Fvwe2kpmYSdkATlQH/el1MX5yO9FRcneO23OjIT
JOqnh5+nWWI1TiGoBJqpE/awTjGatbXdlxWiM51JNnla4NpT9aVaKBwxCLxNNgZR
bx+2gBX1FnVB8ENTCikzEON36DTby8ZyQeU8ddaOwpSPI+QzHG1LADub5EkGrzyw
iDPf2raafeeArv9pIL7ks2Nq99cfxr+t/XfMXa5+Tzkl3PSp0B3v3A78nRMfb7kJ
ijZJDvmlzjfEpbnyZ7cnD8Xei6SHwj0OCbR3FHVeyouNp0uXVjDMo6CUhrVqVubq
8lTqfNxvKlbYaZjkhLfC2AcvA04cFwlmZT8hHH8TtDyxC5GZagFAnrG2A/CoZLJ0
Ro5xnag6NECo7+xFBt7LvQLRV3VsCLiOIojpTO7jWOXNUCuGUHuLBl+4QOJ0u5BL
YzLFQPjVCG4ay0rYqyqNwlPuOkXW442zh/BCmVxhezMkY1bZ7OXowwR2ajHAlL5G
oxpFYkp3RZ+J9N1fLKwOTWcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397334993060970211455629423208908783045415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 18:26:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 18:26:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thermalcoffeemaker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 945989803914773436152939242774805410825901079072669738913107976566788969219113438576943937486041369940401771273378691331030523590954020454965748149410356098791962729413797132122382153684865242441258663738587169101574096142614250542835099185585212586667969825994643675810788435530352411887501344398692062241529342758046983380954284396322769327840195745796435863144220737645063508927486608608837347245731673445553456022546522477802407594289959630510485420542475818490440409300965531988201121808482275195324124207562842027751071176090244414695731291937064435133539739607275131748047417530451200154614293697371189784272081730636333209180204683711434484752873492277711030640468059181395375456017819433103821021009710326260401410624536104719915571509976097064677593303038077661425474247192833728276571194952703808194783434875807052120281773467139320771172416600414062605651540972438277798313258900359284998788399634188860075051767330108783421846955350199863733231725361810796416172798195318822902253137462782063834034778799275166583174187734646191653093152238740209837495866916682390010643822028238692156375941477170944314941126114031870898905639709397485469040496697327703173619727630442306923415362612944770976659233524827659284652117351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a6b1d9709f3f77ad6d6fca30a069d4b5ea87e1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermalcoffeemaker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ecd3a384a00000403004830460221008e4da9e2681386c1de1bbac30193e57f899d9931cb8209d73bab1a5b00f7f392022100ac3a45aa71dc8bc373a66030ffc2e883c4aeb2832b55fe4a21151b6dfcc7dcee00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ecd3a384c0000040300473045022030aaec90887013f7393e24793fe91b14390ca1a6942c16b11feda475ac779ec1022100da9e811d9261eebfc5e00072ad2d0ae4944861f98fb8590763cd1150cf93b526
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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