www.centralpafoodbank.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6b:d9:91:e5:ed:e4:4e:62:de:a5:f1:09:e2:04:60:21:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.centralpafoodbank.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:d9:91:e5:ed:e4:4e:62:de:a5:f1:09:e2:04:60:21:22
Serial Number (int): 298036271077470500922344466122121832046882
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:b0:92:9c:86:60:8d:62:f1:e5:c6:e3:04:07:8e:73:28:46:36:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e9:ec:0d:f8:c7:79:e9:8b:ea:b9:05:f8:8d:2f:ef:b6:fa:e1:ad:44
Fingerprint (sha256): a4:bc:4f:9a:14:0a:76:51:de:c2:7c:05:47:63:26:f7:f6:25:21:78:f4:47:31:82:73:c3:03:90:c9:21:b5:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.centralpafoodbank.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.centralpafoodbank.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.centralpafoodbank.org

Other certificates including the domain name centralpafoodbank.org

(limited to 100 certificates)
www.centralpafoodbank.org
remote.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
centralpafoodbank.org
remote.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
remote.centralpafoodbank.org
rds.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
remote.centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
esm.centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
remote.centralpafoodbank.org
www.centralpafoodbank.org
volunteer.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
esm.centralpafoodbank.org
www.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org

Certificate

The complete raw certificate details for www.centralpafoodbank.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8tbZqq+yGFJjLzV4w5L
qgXMuPYcoqobjvJCD5be69UxfG4NPTXSKYpMY4IZGAlypXEY7jnF0iIfzR/3ekk/
TkHp/NQ71DUNkmwfN5Icm+CLWfx4EYkmGuSYJyM+7xHdDluDS+Sk2uQDMj46g70N
Fq14NAOlXuVfMAcq8JB2Ifuz+RrjBOsXLtXuiRLl5DkU+87qKIxLumbzG95BWY05
rTRlXlG4EQhY9UaDWqpHLqNY3axLv9CoZvFQcpMz6cEfHXztRO81O1ywWcY0IMD2
jbkMD/2vRpoUajbdfGbWPDYGbBCP0HbxqfmMzoI9d/DLsIWzccDYCCsdW2UfrP9A
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298036271077470500922344466122121832046882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 19:08:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-26 19:08:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.centralpafoodbank.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26231608219545174050677530772114762488110724188261318051309415780333787654494892179318221008751466800696337772314925854627469507346883967550632482420848151977514382635117755393023405080961203840584132401499678745844429521344706183627653925560970486993584161438343333994678149295594422327492732560812361848394087579489516392995387789284732557718627698891716344060327671406989882754829325256886682521194854807869070801166959818343081123582681884880456342106141323308890935333497326697412254665013304224580215691090082091237049552671891996341925084359346199860253180519961454741983686661579779546991540013445969281499307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ab0929c86608d62f1e5c6e304078e732846364e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralpafoodbank.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001692645da0a000004030047304502205457490cb66466fb21a3b25a4046216c1488f1d2004242b06371de8b7edb9f24022100d279d48b820affd4f917327e007c58030ecad6dbc738f3ee7448cb6f24316b0100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001692645da5f000004030046304402204b08dae4b43ec954d40501334000e5879d8166aff42f20f70bf5fe256c552c1d02203c2bdbea9a51ff5ba087d7c4bf85817656c4d43a3fc11c4531a5dae0c8922ad9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0042163c4775ffe25a0e1874872e9890305c7e949144134d2d4fa7aaf2cef79af2859810d84a4b8d6f96bc03942453a43030c24a92f952aadccc4b0692493d500b5e83689ef93230eb6cadb5be0e76cf579c1598cac7f966dd6cdaf4fe5d64bfaacd4502140180d3241ef04da2e38e2e128dcff0e8d428e55456d8123663253a96dd191763fa0287b4dde8a623a9f33b3934db50603c693f2a9439ec7816c4235562d0e56e03791620d5e862f272af1e9e8323047a429d3f973633541b0d16cbeedca1f358691476a4a7ed6b4a7c7d36d74b2257531e09d27e7b54089a671fbc9759a8cb7987dc54db9bbdf469d8e62b8383478c84f6b197a65a8c3de144054e9d