codafish.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8e:e9:ae:09:1b:7c:1e:f8:fb:33:49:2b:59:b2:a9:db:3d was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=codafish.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8e:e9:ae:09:1b:7c:1e:f8:fb:33:49:2b:59:b2:a9:db:3d
Serial Number (int): 397079853597204779262212065821602995624765
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:61:a6:9a:75:91:df:ce:17:0e:6f:23:dc:e4:4a:2f:41:e7:17:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:98:c8:8f:b6:20:06:6e:2d:19:58:c5:1e:84:f7:12:3c:9c:94:37
Fingerprint (sha256): a4:54:c9:85:40:cc:42:7c:98:49:b3:4a:cc:8d:99:6f:f6:c4:9b:28:dd:01:e6:df:91:65:2c:3f:bf:3a:2d:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate codafish.net

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for codafish.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coda.fish
codafish.com
codafish.de
codafish.es
codafish.eu
codafish.net
codafish.org
webmail.codafish.net
www.coda.fish
www.codafish.com
www.codafish.de
www.codafish.es
www.codafish.eu
www.codafish.net
www.codafish.org

Other certificates including the domain name codafish.net

(limited to 100 certificates)
crucible.codafish.net
composer.codafish.net
codafish.net
wiki.codafish.net
deployment.codafish.net
codafish.net
bitbucket.codafish.net
support.codafish.net
wiki.codafish.net
bitbucket.codafish.net
bamboo.codafish.net
support.codafish.net
exchange.codafish.net
deployment.codafish.net
wiki.codafish.net
www.upecajme.com
codafish.net
job-board.job-offensive.client.codafish.net
vacialanevera.codafish.net
crucible.codafish.net
deployment.codafish.net
service.codafish.net
support.codafish.net
composer.codafish.net
oemeta.client.codafish.net
deployment.codafish.net
composer.codafish.net
bitbucket.codafish.net
codafish.net
codafish.net
bitbucket.codafish.net
oemeta.client.codafish.net
starsforfree.client.codafish.net
wiki.codafish.net
bamboo.codafish.net
bitbucket.codafish.net
codafish.net
umfrage.erdbaron.com
codafish.net
forms.wimenetwork.com
analytics.codafish.net
hosting.codafish.net
support.easylogic.nu
oemeta.client.codafish.net
exchange.codafish.net
bamboo.codafish.net
crucible.codafish.net
codafish.net
hosting.codafish.net
new.development.codafish.net
events.netwyl-informatik.ch
bitbucket.codafish.net
failover.codafish.net
crucible.codafish.net
codafish.net
bitbucket.codafish.net
support.codafish.net
development.codafish.net
*.codafish.net
exchange.codafish.net
status.codafish.net
status.codafish.net
crucible.codafish.net
new.development.codafish.net
crucible.codafish.net
failover.codafish.net
etmgroup.support.ignitehospitality.com
composer.codafish.net
codafish.net
job-board.job-offensive.client.codafish.net
hosting.codafish.net
*.codafish.net
codafish.net
oemeta.client.codafish.net
bitbucket.codafish.net
exchange.codafish.net
portal.ezireturns.com
crucible.codafish.net
hosting.codafish.net
codafish.net
service.codafish.net
wiki.codafish.net
wesound.client.codafish.net
bitbucket.codafish.net
portal.ezireturns.com
composer.codafish.net
bamboo.codafish.net
codafish.net
oemeta.client.codafish.net
statistic.codafish.net
oemeta.client.codafish.net
positivomusic.client.codafish.net
expense.dyrtyinc.com
exchange.codafish.net
bamboo.codafish.net
hosting.codafish.net
oemeta.client.codafish.net
books.a2zcloud.com
codafish.net
wiki.codafish.net

Certificate

The complete raw certificate details for codafish.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSK9h8Wq5Wuk1ZxAYEJc
M7R+3eFK0E5XCKrMQmyngrxYMEMin6QiLf9G1GNoiJ/ZAFs4wDPtG74zJEAtHM/u
UBuhqPOvimgWS8wa+aj5ecUaes4x+r/qdGfG3AoVkskERO5g4em3hn4JZi77QhFO
UvvXIjmRRhojl6eN23ueHq2CK3Mtn/VYFNATje7Ud6n7tnCZ78bwY/AN0U2phH2w
O9bxSgGIi+5GdAeL7xSfPmRXaAnPp95fZ0ILXfzokTqUQA2BlEiGsU3hHA+H59D0
8ZlYfW0wnb/H7iNOAlvrDgCC9yVpr+Ky4W03iIFpNY0HRw3bUtRY+IHHW0xlLmg6
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397079853597204779262212065821602995624765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-12 07:47:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-10 07:47:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'codafish.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20846451425933488981875079535732521573630795818588881988275165678825163561159117480663983166101954023943449537810692118697553675732459292946837744446561311561875210789566878803880290416478933309220932039058151007784979053486267106329817996966310962877658445541160211044834164650244281967659184278387859492539832560632703972173114398973731422244705566261613290432371658534530566239815940831790274228391577075795710792108147217683794092836362698872880536679144237659677744056813479933923154839687076945467795839434886926383618372976727377124525416006989450823419335216978018950119259826563583139716776254650799748561609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a61a69a7591dfce170e6f23dce44a2f41e7173d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coda.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coda.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001652d51c08d0000040300473045022100be173285cf188f93489382d5b7c38a7f4f62b573b5a50ae81eea7055333996ce02201d4ca2aa24d45e6d233330c42c6d8f5df928663955a3121aedb6c1e7ad4a8a89007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001652d51c1240000040300473045022100d9675aaf69a1a087341807a3252882ab995b8787440e6a02368508aa04adba2c02201f664e700ee6a177cbb535e750119941dd4a8eedc7c3fb898cfddaf911ec3685
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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