foodsbynature.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:89:79:47:4b:5b:07:08:d7:60:18:f6:f5:30:ff:4e:03 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=foodsbynature.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:89:79:47:4b:5b:07:08:d7:60:18:f6:f5:30:ff:4e:03
Serial Number (int): 308478558379734029774513079608689804922371
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:3b:9e:35:9f:f9:0f:0f:1b:92:cb:5b:68:7b:7b:7e:06:58:39:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:f4:a2:29:f1:36:33:86:47:21:82:0d:98:5d:e4:f5:6c:ba:2e:65
Fingerprint (sha256): 94:9c:87:3c:04:79:54:71:b8:a7:4d:bf:55:7b:93:8f:ea:a2:dc:d5:64:cd:4b:28:e6:cf:20:95:9c:ff:0c:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate foodsbynature.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foodsbynature.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foodsbynature.com

Other certificates including the domain name foodsbynature.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for foodsbynature.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308478558379734029774513079608689804922371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 06:41:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 06:41:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foodsbynature.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 922517600263094091356927812166647430208669939127030021126819378772839095640911442271462067333561264664912443325927414471531828640779896635372068446031145656051453930239385495149169256504106584956448087476750403353156861529454098403230041027470937432096928693444834666219706874167148356700033165122499478275274245918939961147392186593840690572673320328899499803137311437703125923195677573842585979711709059028584737129221250505638814922723088641654824552192082448498333086340279472303866837930675701441412650083562582447035470066539657039357180193702674026984949675291769556837121692737508393646246763279743893126675847768565367747139453120561350477774098711974500463629960229295983784823237969072492395503947711298461716209301958391915998556578765186727658734029334952766055127092601096983200225329133051971997261116418883122783280835308682549044244686366518253934235009151127925300682887901256999695938899523468017195642207490052538658200365651489927909727772678337629135343834943014279285166959224252692507668352545863563431372004409556092070328665293787372256502493787266409937613408917751847866161008981341448363055742598096349580161624126831513494129561471204786223308331873474379397831836925512890657071579095402212489268917283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a3b9e359ff90f0f1b92cb5b687b7b7e0658395b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodsbynature.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fbcbfed2f0000040300483046022100b7b7421bd5806ef17e2ce69959c407d8be397490ea004f5e6960abdffbb3d685022100d7aa049d2c557cfaa3aef926adfd730d10c58f7817b1782fa82eafe52db36d6100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fbcbfed5900000403004630440220033d5260cb0eeafa4ee4715de2e7f27494d19abc342579a74c289dada6968f69022028741bf9860a712f88992a28c0791d70c499def31740d0f4aa3c04de21e99330
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a2e006e3d7dee7ab1d85f38a66481747d36bcb157ac75b7c4705edfd1e34aba08118a8923005059f713ba72248cad1eefc3226f55a99874de58710e48a562a983486add03fe5de1e4aaff20ba91728b88ec00627fa1bfbda719bb9e3c86103534ee23a842c5f3dc28dacf428b55277fde09ea211fd983ed8d9ecbb00dea51c3f476755de727c840917655eb61eb5a3313753f9b75259a61a20df988a573b8fbce2319e8b0c74031c821bac4046e0397b9222cf1ae994a02f757675a255189010440f8fc91b4036ecc01b4e504a46b057d2f93e5c82fbe18bc84019cbd3ff24c5a5086f6b92247b0372a9aa0bdae4936ae9472b2b7f085a605ea25d26bdf6b4c