thermashop.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:b8:e6:e8:e9:0f:23:e2:f6:d3:bf:9c:16:c3:db:e9:26 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thermashop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:b8:e6:e8:e9:0f:23:e2:f6:d3:bf:9c:16:c3:db:e9:26
Serial Number (int): 328277978615270441882032102036938396789030
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ee:54:69:f9:2d:92:eb:a2:78:3e:e8:1c:dc:07:be:9b:99:65:ad:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:57:63:bf:ce:40:bc:2a:f6:3c:39:58:9b:a5:54:97:df:6e:26:63
Fingerprint (sha256): 94:aa:cc:62:86:20:d5:47:47:c0:5b:73:54:99:7e:fc:bb:71:b9:7a:cb:6b:59:87:f1:ff:e3:89:1c:4a:50:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thermashop.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thermashop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thermashop.com

Other certificates including the domain name thermashop.com

(limited to 100 certificates)
roccabascerana.com
www.thermashop.com
thermashop.com
www.thermashop.com
boldmaster.com
www.qualbooks.com
thermashop.com
www.thermashop.com
nozzeinitalia.com
regenerativeco-op.com
thermashop.com
www.portuguesedomainer.com
www.nesotaku.com
www.thermashop.com

Certificate

The complete raw certificate details for thermashop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAycfDlx48mT+5okRq5VZM
WDzX2SaUbIURE0GxVYGBTXGADeKclt610dXbTunIrDMS9Bu6L2EgPhsjUTIsjMNZ
A7MRRCVcuZ5mtVW1cuF3j12pfDuSVN5Xz0wdmEyA1tIvSWFeX+WFTy/LKw9JDpRS
CqAv9OS8Qd0ykoqPvsU6T3S1Fxqg1oaU2us7dUFLUGmgr/6X+tAFfpOJWDYlRQbc
XrIsD7l7XxFB9QxZpZGkbuXzxPDrS65wBuY3r9pF3gurdPhlq0s07zWxlJTONqDC
kIAYwCqnIJfVDwKHpuWznsQmp2TadtckmEuZm5H5sHFaJZiDrE8+2J+qfJVjW33d
WoHDccwjg2SL0su7MZiCkyNiz4R5O+76iudbSbnmEdb+pSjRRy5N5FvWTDjQTeRF
OqWcJhDr3/GadzAMZoxAvdhd8/K4A9O2Q9yBmsZ4SKbwT4fj7xqTuoNPFZkGyX27
IxIy3IM4XMmSH6wlfolgNUxyJbIDo4088Oy4Ev3q+TNWkxS3KPJwvnANmr6mfd7R
XZ3uMANUe0U4CQzTzG03QhsuNwln5xx/bo+JxThQSs0Clzh48Q6BzZspD0xovzfO
S8HslkfWx73glPj8zZ/7ryzt4uiOyH5HzdftsJoIR/VYz35aBNgPhvIDYfhyzNdU
7s2yddagDhrAle+aCIDfXj0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328277978615270441882032102036938396789030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 20:49:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 20:49:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thermashop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823191919070807811932182264128687949798912453563852938475864884519983176424280947946117521864798474737858990916173197264106978615202225432778420101960168734569814529106452974072814552594640011874694556344506040070174585031520612229978898624736945492844476107901459141187817476345204953356585774758970353555310999377458520022748814993315142090177558657777043122202279123886237425660465156045273263355922470115437617733091217196102737488088360055265082790715878903093904207188534270493278687534330052340673229762344299183962147916493684957825581604671573060316415389035524332316048014839811332374620198674860469457829732188100690888565425985954542398735015969367384765888432380959013062360824053883525940136727139148406641125033795048536499335693004283065358781940526956661485554761304631272127813767857753980824039528313697866944204675096219819898525416189605679085436053391077443017423892441650982217321750476932238174496006490009662260289389138740396924670649766101636440142946813795020089827036446006175862782551743767522610257488804649659754816124526319961526636752142841317814632944503932521428078865462372146071986639493156178863615434598440980066131593522076988891713095480900862317960359006240978791228604835317931722261093949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee5469f92d92eba2783ee81cdc07be9b9965ad40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermashop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f1afc6061000004030047304502203dacb29560ccb4093e8f3c6a3d4277bf75a91278ef685797b289ccf26f942f93022100e9865632f195cb5d350d29c7f37f72bb090d9c213ccc094169cf5063599b283c00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f1afc608a0000040300483046022100ad7381517305eaf2b674307bcbe5158e51206d890de0be2d70a87906e6f6e34f022100d244bcfa5d184686b8d4ae10fddc264814e535de7bd44ea704c6ff5be101d7e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0083a1fdfe79cc627c5dfff5d2bb71ea0df8b4f89f477ea84ba409f65515f5c802b7098954f33f20dd30b3db25af9d69f86714b3d7d2dcd088ca6c9c95957eb85e46119d0e17e0a4916f3ca3be3e9c0721a1e604690b06c42222efa98c725cdd6ea887531c58cb2cdc4431ae4398a92d19bf6739d51ba6f0888dcce250c2b553f55304f1596a50692d52d2481dbe52f544173c865addf454ee2ab22278c5f2b68ecd9ec2daef8e89f0e998610988c7b63d86749b72dd3b790fd1798a88799455fc12f7fd0fa3934169cbec7b43fee0564f91f406a1b6c332644a97a9ce6bc3a13cd21655c0f10202ca26d7d1e1d83aee9b9f1c8fb4ea48f384f58d525491552a8e