massima.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:f2:31:ee:4e:49:06:62:2c:e7:b9:08:f6:fe:57:73:f7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=massima.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:f2:31:ee:4e:49:06:62:2c:e7:b9:08:f6:fe:57:73:f7
Serial Number (int): 288541097212976778869377136354568667886583
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:34:1f:b9:75:77:97:c1:ae:a1:4c:26:a7:30:a6:80:d4:e3:f0:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:6d:9d:06:e3:9d:42:57:4c:65:3e:c9:9f:02:db:10:cd:ef:0c:1e
Fingerprint (sha256): 97:47:0b:f3:d4:f3:1e:02:1c:da:f7:57:d9:f0:ef:87:65:2e:d0:d0:f6:fd:2f:57:fd:91:7e:3c:86:38:c6:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate massima.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for massima.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

massima.co

Other certificates including the domain name massima.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for massima.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISA0/yMe5OSQZiLOe5CPb+V3P3MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgyMjQyMjhaFw0x
OTEwMjYyMjQyMjhaMBUxEzARBgNVBAMTCm1hc3NpbWEuY28wggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQC049EfzL374YqIo2Ed1vmBq60Kw75bVs6Zxfsc
GVeTlcS0JEOrTQClDsmEiRnWYwQ4c3M0T/gAVWZwOG3V5QpncezIdUGQbUjY+Rr9
S8ClBoSErMjAGSJ+xO2Xxl0KB+jQRuZymh0eAAiKBkjE7BKAJpw7kdhQPY+4Lycd
s+RPeCcops3L6hwgXwMIZDLa6/wicmPeSrzHtJwU/IDbOd5vFtKSBNSAlibot1S0
n/QQdegsfLPG3vK3y8in9X0CKsc3FejE6C05B+nNLe9HK6I+7xudz5/zc44SLuTe
CXjgc4JMOZMNt5Q3X0fDIFSCa+Bx5B84FILgVSHAkAd21WoOw77xxrFNkr9bbVwj
nnszvkgbu0CcNQDcDqvuk0kStLIB+Jo/eMDzUImfQOeVDJTPOwqAh9zrIgLjUO4a
PsvfX/NZmevt5nSlzbcO9DHNWegNoqj2QRn9r9kmbIe4mFMz59QsTc+tNiX3tLVU
XW36aAJfZlBVZdZRHJYt8loMe2NITVSJpa/uu6ZlExKs4kP8mgbE/ESxA/nPhd8+
DwpwjJqEqhnPgYegdWpnEkbJVPTzlNPxTBe7lCv2MpJjSx5GbpWsrz5TsW07IXTL
hy4yS6kPRYUQEGloRrLbet/GQHqtt7ghevT3DDPi/CNBZs6asPV5WVkQbmIWyklU
emz8fQIDAQABo4ICYDCCAlwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTdNB+5dXeX
wa6hTCanMKaA1OPwojAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCm1hc3NpbWEuY28wTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBv
U3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWw69sseAAAEAwBHMEUC
IAoU9LumfxYFPwn6G4kMj3Gy9BruKxa5cjUCT/MLnfz+AiEA7mxezPyc7B9Nzf4h
xbJX4eRFqEKbhzk0dNmxdExDOwgAdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4
scdoVEvYjQAAAWw69ssKAAAEAwBIMEYCIQCXAAZK876kwpzbuqFWzYp+5krH8ES4
oJMRUR35lMpQtwIhAIJaGFg3IS68GJiWOvaPWBCsIysYp5ev/Vp32XK/XSKvMA0G
CSqGSIb3DQEBCwUAA4IBAQBi9Z158dq6PA5U3gEaB9+/DcTW0dl7gWK77KsBIyhV
Urjgs1nVHdAtPRcxVqaNP4rKys1gB5JY4NY+eLcMg2Su15iiAQGj3JU6PhOO1p9M
9jVkn8LeJotVJhCvdfsWuZphYU755GaXw/4xlFg5LOaHU15yvjOerMrD8Y5zGW+i
vBn9z754lBSIdReu/DGdr6XCGhadMB0LC8u/jI1BkUrpHTqaCKIZjCYJlDd29PgQ
7WFuRIyXEj9wexVvjbDJiCuNovgVpTO7w1ZK3LkO8n8RkIocOMDpGl6beTdsCVRN
dfbQCcnyTrPJiA4UqUvOBPTu7Wf8n679i/mB94kEVbZ8
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288541097212976778869377136354568667886583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 22:42:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 22:42:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'massima.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737966447204189348494324469686196921114541802572193492938177975512176670116002915275983803463015067275307342207389875354049071504836914744128701988551408878921368046999145830908314844760373368179666848509815330749635156701569584934333485182985907639330091186804338507888990025735432840196304646957613307822995333768223290230056532400774507606703139094159795345463663187597747225768000906913460337805798999923927839488407532463603595717761155771162731930671784457346458747242784009880742877670368967172831479793377188499762550913824765966264669715803283572365529817353860707429250111054019028228511928728735464118032787744749566530596134472999842705147066989448931644751514548630919508068300939311421804237901287444884147851890945238280520477243067049731462257413382088572924487839181836119079112305391591024421926220077985549315655653092656667792182635744844992520073345289920328140116080979720580722082645649196444953575706115643275684109789765154291952206463626246638849366551621318947854672000857012308518333483921948375918840460090326157570652067850270425118872078097094667131617818604168472858846164535007740449007476660878750814459470919654999405136400028508847045567881279466618185093615524973461039901530942930601238699244669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd341fb9757797c1aea14c26a730a680d4e3f0a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massima.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c3af6cb1e000004030047304502200a14f4bba67f16053f09fa1b890c8f71b2f41aee2b16b97235024ff30b9dfcfe022100ee6c5eccfc9cec1f4dcdfe21c5b257e1e445a8429b87393474d9b1744c433b0800770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3af6cb0a00000403004830460221009700064af3bea4c29cdbbaa156cd8a7ee64ac7f044b8a09311511df994ca50b7022100825a185837212ebc1898963af68f5810ac232b18a797affd5a77d972bf5d22af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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