cuppingset.com

Issued by R3

About this certificate

This digital certificate with serial number 04:dd:88:2f:2a:b9:0b:10:45:66:78:4f:d0:35:0f:db:76:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cuppingset.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dd:88:2f:2a:b9:0b:10:45:66:78:4f:d0:35:0f:db:76:d9
Serial Number (int): 423832566728469324131678578426747899573977
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a7:22:41:50:84:b9:80:28:c3:77:4f:a8:c7:82:87:0c:2b:fe:c5:28
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:35:c1:8e:d8:d9:e1:c2:8a:92:3c:d1:33:5e:4d:55:3c:11:8d:0e
Fingerprint (sha256): a4:74:2f:7c:f3:f1:33:37:1a:ef:6c:f1:20:5c:74:c4:3f:33:74:5d:98:34:79:31:11:ee:99:bf:ac:2e:78:f6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cuppingset.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cuppingset.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cuppingset.com

Other certificates including the domain name cuppingset.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cuppingset.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423832566728469324131678578426747899573977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 00:50:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 00:50:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cuppingset.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774670841461392383123929976408959736464098482684744131803922390326882129000861960946818550655358914599724268049217946069285579676280636247784792273185016840136532419647967208855804678855575345456921753760232606824544418797864829668114714408329097928333528446722906839269529227823341756071087833940027156065601895795035281623552779058628421049828720646514461573625248598540385609076122960984052224996003726913105758027861446429430495186161673753741488790066656300321113349073077282462859577420917501200943152150227618612281081772056826476760035718872728779699906838022423771343983730900131365506162838099464669958615596848834220615492844773795103973160971946504891145904507209897880049132571219034011724349678450468379084431218222151603851185694875628625028325929255377949683401971926338698230603618060895589360254257398993844062810999555796427993381482903128507516129698460299379383233454773712997833993302838465664875805920123635380938879387052727470598843873271257876217030869776182426531883212601800730981978439039304699072177274655525296224055551999952489953051200790910339031814853218272475070847874317205832888310992214855352065200909267904150323304075452628973003502649341362271090842777912367439054309064043050815808258057943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a722415084b98028c3774fa8c782870c2bfec528
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuppingset.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d1a43145f000004030047304502205e2f7802cf4558daf61b3179f9daa8a65c87e852c9e42101b12fa3ae91d2427f022100bcb6b8b3452177d1939fdb6266c368592d7d55f7d4ec058d8e37cea2126c1419007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d1a4314a100000403004730450221009d595da368488c3c990f91c9b4b5ecfb2775fc2c1e9b9596c6660fff6c7ec3f70220019a22ba850956ba6ce1c49ec4f7d04e71c5d82b43be5f9ed1ff0005d79f8689
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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