cotaicollection.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:36:bb:d3:09:ff:6c:aa:44:ad:0c:5d:69:9a:3b:39:6f:46 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cotaicollection.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:bb:d3:09:ff:6c:aa:44:ad:0c:5d:69:9a:3b:39:6f:46
Serial Number (int): 279961767021638845180522137364472360693574
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:56:05:73:87:e7:29:59:ce:a6:a4:c5:48:ba:8c:bd:06:c1:d9:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:68:f1:c8:6f:d8:cb:91:bc:b9:71:92:69:6d:5c:f0:1d:eb:c8:26
Fingerprint (sha256): 9f:a6:14:b8:42:76:6f:93:96:d5:11:0b:12:a7:e7:fd:ee:b3:a6:cc:68:58:07:27:15:25:08:6a:37:bc:23:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cotaicollection.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cotaicollection.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cotaicollection.com

Other certificates including the domain name cotaicollection.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cotaicollection.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279961767021638845180522137364472360693574
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 09:11:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 09:11:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cotaicollection.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771935045607117271974490180015952631541246330141879802881258362480134963701695756133632374034816506460194447201665144817848770889718844026027003224126085582695266003254476916203037564389001480601949794379791656196537749538062900671558185314488805157378600528702203118377566670341590729865137595794156952592077218599713209476551391073938573270025620297350819874288034003406925029582545767689574408415407285111343948904024433999245593007118455650074633295315104358912744806038296145329049079643129248005042868626943385318182662495008206622237360263941265627362789446821262448931997473211235296405044371956887027525920469300991383697134821454550281946713295129922829563027638938193164853360458425517280386902042082613989193904257343559152247223135155283077231388917956962844056455852227271030577077360296903003111760278495680528128380987716086615309910409466732429650875696510211544229962599947975830877498341570044736108160326974942380515374111878633845064501277376133266979386365861197428370692397974740572672865326721120842158901783757440790055665883488640161213715919074910849590234781333493126500214904107892393947870360989078913834540759222349284894161536087782899643575512577884289241192096935250970075389355128620538208574668371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a056057387e72959cea6a4c548ba8cbd06c1d9c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotaicollection.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd9332e4a0000040300473045022100c0b9e3788cd25adb8394574235b4f5ce056d886ac777e47860607d63eb8cfa1b0220213d1606c2cdd7bfcaf81a1bc1403ad0b060b3ec35d61e84ed50b745c029640b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dd9332e650000040300473045022100b165c947adf6dbeed8e7f33b7097862f2e1dde6eeac60e0de2938d64379ede120220559b716d261cfbb6d6c1ceb9ade843abf56316a584c8c1d5394e0c24fa6b321f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0087b9a58f392df45233483476230a254886d66fe75561ddabcdba5e9b86121c9c3fa06602e348187e43bb9feb34b2c6a7242fc47ddc8acabedd509aa9778afd662c051181e6d4c28656d30297d4b1ba5c943f3702b33972ed0d3876455b7e5224371bbd35ca3076cd0e2a9c9e54bc964096f0d52a4b27019b17e22ed0d1ef4568f52d4e3e92c36133216f0cd6c17ad9b8c12cd48cee9f5e3e9c649623ba143d0a044f321ba604157ee220d335f0593daca6595fb4066e0ed388a06d042fed74b4baf7130a1aac5bfba9576d0aaef569df2efa110ce5a00b8c19f204369e28628bdb7ec87a59261503e6d7d021feb1ab50882153e6fd563cddc200da2839579412