librari.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:18:dd:64:fb:f4:4a:86:f7:74:d2:6d:30:dc:42:af:72 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=librari.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:18:dd:64:fb:f4:4a:86:f7:74:d2:6d:30:dc:42:af:72
Serial Number (int): 292675886569714486352874082211937430712178
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:f1:d7:8a:e8:80:4c:21:72:ec:73:2c:e9:28:b3:ea:98:8e:de:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:8a:f4:fa:8f:ed:84:ea:9e:78:9a:e9:85:86:77:b2:ba:af:20:a7
Fingerprint (sha256): a1:c0:8c:8c:f7:3b:cf:bd:53:39:be:cc:4e:1b:5e:ee:33:ad:16:f6:04:6b:af:a6:d4:87:51:db:58:89:d5:5b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate librari.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for librari.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

librari.com

Other certificates including the domain name librari.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for librari.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv7Lev3ftBNx/qn4QL33H
z3QNFs7NHDfzO0+BDGOFvZvtD8qXIi/kxu3XU6/PS1y7m520Zfxt14L9Cj+Gcm8a
aowqih+ivjfQoBOVc8Gj9L4mZ7m1c2HXeGV1Ij3zyuwxbT/CS++LJuqPt8jmL0Ry
KG/uqdLmuScM/+lvDZjD1xQE48dQLMkqrAJoAEDdSx5p5EktaM3owqw3RVknYZSw
gUDGUfw2fiQcKjVUjat2k3UY4Invupf4o3J7Afs9PXELgUgQrKX/Dno2YeFGp+aZ
oj9GDun2rEzUQcbD5OI7c91Hdvc9rsascFtn0J+zUAkRxy8D3IjLr67JWb/qgJKx
NJt3SCpaGqLjOoG7K915bN1QYf73vgRDkSoqWdti+wD86WJ5h7VmLVH8lba8+2Zg
fl2oJ8El0t0L6cN/HNq6zZKDXP9H0ar4XnhIlMthoSKVAPWn635/bpr0KLsGFokb
ltedtd44cpL+hnJ7QEMX768WErNPppe3qKzM70H1URBVP/K65WSo667GfEbiT4wg
Shhnc2odGs+1IXkdCg5bTynKPSa8uLKAQrLkjGsgF/elYOlj6YgZi6UZdEDfiqp4
bd0LvQXQ3rfV+Rjis6rvLueMckti06zy6Q3QyTv90BfFnpLlWinVGF81uA0VCE6+
gFNEIo+Yjg1P5qRNu6hBZQECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292675886569714486352874082211937430712178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-07 23:16:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-05 23:16:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'librari.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782062510661537533854429801773396542318464443441323055145735356093101573700802313775043536344531720688984056840006867362438473688661605270796511549658795578796226894598622636705139543415859660532609695961735199674511888377222492212239232924562074500497108227459496555327174971592446303221618059106909991953984971311445420426929342320557752303509553634342473702424325704244003945976142951048409768850032657622305302608143615378399442807413290327691739712034127486691752904958079264053020400177733292946544978763758107227095358935140952475731000909942024824761606565125000214529424098879193947734655012772094898158017483705990907876301824068836446440353646564693076168810714819510696497482569214399477348495521147586172749866754253175758602894107572632292906052456057102138479882239872216500588778936187135666321157935796622795100673934360868445385879298284458992181812936456754261670915099359159669292830154182974040567458652256811769649456259792809135729358531357338755774988841876183490443893407523643379049217524990983680143468289513650177458586564662377122273560769152060924670379730495684872277389620325355051122740730800745939954371144187391782787526933790484506441077564999867201130078289896272085747232629932315946350423401729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15f1d78ae8804c2172ec732ce928b3ea988edea1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librari.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a94cc245d0000040300473045022025397b8a3c5cc2889c5d49821adf59ec18f933b070fb0dd37e45a7981e692980022100d2a274b6a32da6fa3d8b9a0474bda1679240c0e2cea62d75e0e566aae60936da00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a94cc2480000004030046304402202f61e37463ab0ae454a3824cbfaeac7728172bde94d9e871e5d624dadd1446a20220640f72cbe51d6ceb6fe0a54f6592056adea25dba9c7945f4d395d512c7db6170
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0053e9ad7b0169149ee9efed5ee3a9d2bc35b1e157ab0ffc9b0ac80352c5120b3a97d658475e6a76d390575590d26c906a531d0d052e61d814fa594b6243c11fbde8b74131f38bbba50805f7059d8f692c153a96ca17429ab50e6e087f4f1c2c7a7fd880104c3e9684c0ca6af142041d228be7cdeadadfa5c64ee150811ebb8055ffda6cb4c9e5944f0eca92f9d9b07e84c22b4bcd31effeea6107682c98b0b0d6a8e3250ad19cbb9d64e2c52abb314edb2f80a6a9efa576da0f7e8da2c949ecd4cd0574de27f6fe6975341e2c0af7425f8f65feae98fd4c762cf699a6f20d67f7fb52a889facc5b49b3bc12e30b032e8c60f062cb576b5dafc95b79b05c9eff35