cbs-dichroic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8e:d4:f2:02:11:a2:ba:2b:a2:06:80:cb:60:ec:cf:f4:c0 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cbs-dichroic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8e:d4:f2:02:11:a2:ba:2b:a2:06:80:cb:60:ec:cf:f4:c0
Serial Number (int): 397052292742722475599526444452791586911424
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f3:12:a3:79:04:65:1c:87:fa:aa:69:90:21:b4:b0:29:72:61:33:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:28:a5:d1:de:65:e7:00:68:7d:50:22:37:d8:57:75:2e:bf:57:88
Fingerprint (sha256): a1:57:dd:60:7b:86:b1:52:ae:69:3a:98:45:ac:d5:49:74:2e:6a:42:f7:ac:ce:d0:e2:43:20:f0:66:84:91:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cbs-dichroic.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cbs-dichroic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbs-dichroic.com
cbs.webcasa.com
www.cbs-dichroic.com

Other certificates including the domain name cbs-dichroic.com

(limited to 100 certificates)
cbs-dichroic.com
cbs-dichroic.com
cbs-dichroic.com
cbs-dichroic.com
cbs-dichroic.com
cbs-dichroic.com
cbs-dichroic.com

Certificate

The complete raw certificate details for cbs-dichroic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397052292742722475599526444452791586911424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 03:04:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 03:04:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cbs-dichroic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 911371650457895936321130885361032784197066762841080147454176021541111181837707664471105721126031544262784099148808152255783283528526571229646426579638901123727501609704896975203733001001209831996044264868923441510197127033339776690750456207112438612093303454394958782696594744618644491420396733986088528366338780137019296921938553379104412272887574242349090933722147792411108755023524965750818742724537404692502184069502155116895044980912470259437636848111227395132620030079831339369393351541799372898093848664311617637793503340737488153702417197273219428250266194192024673607167283154373173660999939173293703984292850530408426462029849390182317256992899417297785125108368771515883308920004246245012452268762679623846793962637501362794188923096732381585206047976701082628210888207847585137108978644088056339408991043545941750281436049544800694129234910998840214056566276709943183832057625938257300300277151048745345849183165630771139320192625239991723190922164182488609861410856868966957439505398133720270825321975532080524422294485298486756358961988969178585186366006410614377796967654779613359735183795727843049384283082196658343695379479714793869292752412770062146946729469854991955300100906250281610978201315327339757290950739219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f312a37904651c87faaa699021b4b029726133dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs-dichroic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.webcasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs-dichroic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f7e2c92360000040300473045022057240fb0ec26b254f100d71f7a5d074a4bf05e4881541379ee877df1cad60f7f022100e30943ab1973c125afb09177d4330fc05f65ea428d0904096f1f14d76c99598f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7e2c92290000040300473045022100b618b67aae2f6c6eb336ec478ecd48a9f2d54e4abbc8e2c127ab8d5601ff2cb702201786c4de53c98ad7222185641b30b98d7dd390d250e2fb0f304a3196b501f8a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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