leafky.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:f4:01:93:aa:32:5d:d3:f5:ab:d2:41:cc:4d:d2:27:5d:fe was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=leafky.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f4:01:93:aa:32:5d:d3:f5:ab:d2:41:cc:4d:d2:27:5d:feSerial Number (int): 431480137203384040303001144897283423690238
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 03:7d:fe:c5:ff:78:9b:8f:f8:a2:2b:d1:72:93:52:db:c2:c5:b4:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e4:09:38:6b:dd:df:2b:e1:fb:09:50:08:03:49:04:a6:20:32:1c:27
Fingerprint (sha256): a4:5a:5d:a3:1d:ea:2c:1b:df:10:11:70:8f:07:b1:de:46:4d:7e:53:92:30:dc:72:a9:c0:d2:b2:44:8b:bd:1d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate leafky.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for leafky.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
leafky.com
www.leafky.com
www.leafky.com
Other certificates including the domain name leafky.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for leafky.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISBPQBk6oyXdP1q9JBzE3SJ13+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTkxMzA3MjlaFw0x OTEyMTgxMzA3MjlaMBUxEzARBgNVBAMTCmxlYWZreS5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQD8P5cy81bLnR47E225YC65JuWkS3W30wEcqdMn vThlO4U7JMgn8lABorlyCwsY2uGLiN67QiY2TAAR/Ljz/LZDJd3rfKJQfaKoYh4b feWx2/NNIsloMIsAlt3m034QjKe6Fty8PqOLrkFXubkJdUWIYQ8CvGL6Hm5STsh2 qF9BnQSwCPDmjHSePoQQeQ2r/wDUgLiF2W7WSCMD2j+Y3aEeU5HWFPH0JSp/hPxM I0KJsEj+2c+5Rfq+Dj3GcyCeCf4ZMSonPhFuQSpU2EsXZd95VkXSrvT0Q2Rak0zr mL0Q3MlH54O4ttTq+uiUF3nArMJ9xTRIPQOw1AXbpvaMfQQj+zwl0k/bFUC3XUvo tohsA6K3qdbTp8vadkkWeX3DczuSSp92C2SVZFMoXmySB0if0g8qbtPIsQecdZ36 0l8BIam8FI0aYc+GBtv13RTGeacujxN1P8lu5N5WyVlrLO27Isz6FSC3o9pSWPKc mlExPcAF3CZheDAcHqrpxzsf8hhsx1Wv8NxyjM7s+K0JLg0GS2cE6QmjIDgE1OBC wRUZZsXK5V+Lhmzw/ZhOFgPNRp/f56YY5Owtrw98sxc6m7nxdjJHG6DOgEyzqGFl Qog2gCXcRQVzxq24k5OhQar5/OWwIZ4PZWENBj4l+mkx2tnhqzf/c+6UfYpztCgd /HHoCwIDAQABo4ICbzCCAmswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQDff7F/3ib j/iiK9Fyk1LbwsW0YTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCCmxlYWZreS5jb22CDnd3dy5sZWFm a3kuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYA AAFtSdlwAAAABAMARjBEAiAKOQHXZx0sGqc+Xg2wmw1uQ4FDzGLfRKPX+cWAOvVi GAIgOEZYyJ0e8d3+oYcS/NV348fR3GvYt3Z+R1gcsPcC0CoAdwApPFGWVMg5Zbqq UPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW1J2XHuAAAEAwBIMEYCIQDWQBCqocwb ncXgj2DIA8m2pD8/Q5d9M/SKZ1mAAxhMMwIhAKAfmzaXTLq1u7/oeVCEfMN6kjQY oU4GR4tqQ4mumgpDMA0GCSqGSIb3DQEBCwUAA4IBAQBVkfTVga7p7e4mcYdzjmwr Tk6KCOdtMGTTwJsrUbEBmZWfbn33sIAPhoVTWW73y8X3cMM0W3HWGOIjYZLIqQD9 JyFKizGLiODBBNjcE9E9bj0ABiLJXG8YJmyK54JvH3w2DVyChmM3Sd5+ysLcZxKG +o5FYDUCXz6PxoH/FWq39x7dCU7AUCRwm3l6zBJkoiRadK9B0kYYQmUSTm7IC5u2 w/4Etrzfc1HqRMW65Rv/BG0MecjJRVLLsI2u5IHxYuXz1u5p3JksOzaWW83VXiye UE3pz7kaV1j5/BqM41SYlmvqXTHwsrKnFt9djluGMJn4ejJH//DQsXrpbdYBHV25 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA/D+XMvNWy50eOxNtuWAu uSblpEt1t9MBHKnTJ704ZTuFOyTIJ/JQAaK5cgsLGNrhi4jeu0ImNkwAEfy48/y2 QyXd63yiUH2iqGIeG33lsdvzTSLJaDCLAJbd5tN+EIynuhbcvD6ji65BV7m5CXVF iGEPArxi+h5uUk7IdqhfQZ0EsAjw5ox0nj6EEHkNq/8A1IC4hdlu1kgjA9o/mN2h HlOR1hTx9CUqf4T8TCNCibBI/tnPuUX6vg49xnMgngn+GTEqJz4RbkEqVNhLF2Xf eVZF0q709ENkWpNM65i9ENzJR+eDuLbU6vrolBd5wKzCfcU0SD0DsNQF26b2jH0E I/s8JdJP2xVAt11L6LaIbAOit6nW06fL2nZJFnl9w3M7kkqfdgtklWRTKF5skgdI n9IPKm7TyLEHnHWd+tJfASGpvBSNGmHPhgbb9d0UxnmnLo8TdT/JbuTeVslZayzt uyLM+hUgt6PaUljynJpRMT3ABdwmYXgwHB6q6cc7H/IYbMdVr/DccozO7PitCS4N BktnBOkJoyA4BNTgQsEVGWbFyuVfi4Zs8P2YThYDzUaf3+emGOTsLa8PfLMXOpu5 8XYyRxugzoBMs6hhZUKINoAl3EUFc8atuJOToUGq+fzlsCGeD2VhDQY+JfppMdrZ 4as3/3PulH2Kc7QoHfxx6AsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 431480137203384040303001144897283423690238 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 13:07:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 13:07:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leafky.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1029083692252533507172252167737848308282379349792918980273570002212945406209990986210093643713746826258870381435557066977577037660331113450902049287346790150152883602889107839169393117253425186516139439931077148900794214969418752090100577942393110928351949065044291180672950492773768903042905008625291018216565741422383944924243142044615391850825014611249998172900615820001988500891197660036405079254450855623588177553320493383639169416639118251076686540784494183708426064061208561153383676895425378183844047488714545886230389650101824556243272368614169198146239609156717538505079294540410437566353146582587499776853186959848008251832580505779384023756721912333024242505489556286869141478260547779826168817451705461580801899677212813230818060727533836305256620819504669012796141369650374175141317534286070542818868395682293607687863921267711820131077257232091032896831243181758301495690975628894956521719463095190433090809845610469734045239314891267479696830394465641988229676934948177081658385420986084073324885660668125196987182795671411909550290860176701178962181518660892621607960353175430708240234697278294287811073690586399182375924674138020789401732016007037796284054471936183115603496836370669724824290145241185228058891773963 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 037dfec5ff789b8ff8a22bd1729352dbc2c5b461 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leafky.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leafky.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d49d97000000004030046304402200a3901d7671d2c1aa73e5e0db09b0d6e438143cc62df44a3d7f9c5803af562180220384658c89d1ef1ddfea18712fcd577e3c7d1dc6bd8b7767e47581cb0f702d02a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d49d971ee0000040300483046022100d64010aaa1cc1b9dc5e08f60c803c9b6a43f3f43977d33f48a67598003184c33022100a01f9b36974cbab5bbbfe87950847cc37a923418a14e06478b6a4389ae9a0a43 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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