www.caffettiera.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3e:a0:b3:de:7f:74:2b:4b:1f:b3:32:96:49:0d:09:d4:ae was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.caffettiera.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:a0:b3:de:7f:74:2b:4b:1f:b3:32:96:49:0d:09:d4:ae
Serial Number (int): 282647974957635050198105212534382362481838
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 63:ce:b8:41:e6:55:43:18:32:7e:ce:0f:65:36:e1:b6:7e:f6:27:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:16:57:e0:d4:2e:53:18:24:77:61:37:20:e9:e2:42:1c:f5:0f:5f
Fingerprint (sha256): a6:d5:02:dd:0a:22:74:2f:ca:8a:58:14:08:49:ea:88:5a:21:ac:4d:eb:1f:69:79:c1:cb:f7:09:63:0d:83:2f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.caffettiera.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.caffettiera.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.caffettiera.com

Other certificates including the domain name caffettiera.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.caffettiera.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgISAz6gs95/dCtLH7MylkkNCdSuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjkxMDU1MzRaFw0x
OTEyMjgxMDU1MzRaMB4xHDAaBgNVBAMTE3d3dy5jYWZmZXR0aWVyYS5jb20wggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDiUjGZD5lLwXq2rr5/rSaI+Uyz
dpm7OXRL75JE0Gb5TsiSPd2Y62SfIZNy4DlKfgUdxmtrpgdY4W6OCPhI3AMwvlbz
OcPRNw28H9ahRNCz1JXujjrBNHrgUun7Qx/Z+MBfqTz33px6q1DCK32pyNpkOUjU
8XYb+gLzS1898ZCrG0VWq4QeEypkbgE4nWZZiSTyVg2ERd+OlJWYCMnle9u9YVQ+
trP6hRp/R1P0/mIaBYUCwbYOqBkSZC8cSC6M5XHFmOw/E465t192y5ZejldW1YD+
TUjcoZtu98A02b5bPxeTfH/3/ZCRWss/7rjOmpgyksV5D9W7ITafw0OLkhQPPSkS
AoLrGl15Qp70dq78rSgeXzykKd//Q6r49bOgvKTdvYe/t2Xhvbqro5O6RelzH7N5
yHt3xlKkdHXGHpBc7P/wG+Nt0kuwlmY2pEstaFDFG0CDx7zwd+RubngsHYnIyIWV
QoFnIXo53jbZMxk9B8lab+8aYj1SZ7mLB1XQH0UNcZjaTq0r5cBkRSgebFf4jNOJ
Fizc8a1X7Aut/5YgB9ZaSCNKXy0a2Ys/rHfD4DgmWMeSiKlAa0+KZF1g/AmWWHG0
batRa4sJmXwD0LeLxmgPwUgK66LE+uyOBdXoyFBPHHDyhGU2h/CRgDw0PTMLnxK+
P1MtMfXJgCDjvRL7hQIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBRjzrhB5lVDGDJ+zg9lNuG2fvYnSjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3d3dy5jYWZmZXR0
aWVyYS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE
AdZ5AgQCBIH0BIHxAO8AdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvM
VgAAAW184EI2AAAEAwBHMEUCIHkqQqoD36olupG7tCX544x9tggaBOmvx+h45Itr
mUjGAiEAlwEsf6HxRAKvAC9KyVtyzrVFCDLeSbRXcn/mdi/RfzEAdQBj8tvN6DvM
LM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAW184EA0AAAEAwBGMEQCIBIGQYrY
CuA1CKOHLD1YwOmZ9sJPRqmhuYkQYY4R4xTDAiBD5D6wKDzxwdbVBWzIwqAvomDk
2z+mx0NlguDUTXGcCzANBgkqhkiG9w0BAQsFAAOCAQEAPWKQ6Aj7aY+euSAxbQqd
G+y9NNj7q9wx7Y2cWiDePVX9n+DNtkQswhUNdTxnsl4nKSJiyGg6c9HfIL2aAqsf
9aFYQjimLom+OFF2BqouAWRNqD7AGtONRpD1M1qYqOcn4Sj52BWFBc0bw3k5kmkt
GwsKd0CUhNQ8FJIJPfuVztbk2A3vYTmGwPNFv5illTBt6613s122+yTTQfoRJATD
uzxOGwHm6V4DlTnHGpeDe35eMRdz9sQyB1ZT+5PFYvNSz1r7X5I3BfiIf0j265R7
LCvJ4tb2r5WGo3fGPMum0gYqfWBgkZANFUUCeWt2FkRGFVG4PSOD/rXk2vaDI5VP
vg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282647974957635050198105212534382362481838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 10:55:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 10:55:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.caffettiera.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923309407853246623019745469832816595842254389748002868173014720489868072008074425437586588254700069036709096293016170684517176606759697096233210497208894647118683418470960442963498478068057746305224307596942899736480485266305504381671313448596538675484226956476545797579132688291488628966447847172361161952338623367392416163747402658832234106353914917488765529039232743378369128068527589574410197152755189976924777727497747650608158091655851842731820926568599549683863089707314106852419670302507979007421022738657995972822318215973350432948388861693304179701099618681430836935675824978122008573063203453513284719627722463698916291350926981569555355784665357677105297257184469278758500708213162187193114529763925014123033315957726106425725166689235409561691995321630272770715624641833771979171782869367238590489742092878215854050038502167670701523193330447787213164494302517847172791262668113695801780057171058533310178475601396917774921697922358790779910823190747633400696239278427178629511624408269466523553655138352947416630160386184792422991480834760704931178358920686763554037288700700646000485960012482983231119602587874772218899380398743562130756477752262436483164694659492499272997712886366511894358160463606483389486566931333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63ceb841e6554318327ece0f6536e1b67ef6274a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caffettiera.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7ce0423600000403004730450220792a42aa03dfaa25ba91bbb425f9e38c7db6081a04e9afc7e878e48b6b9948c602210097012c7fa1f14402af002f4ac95b72ceb5450832de49b457727fe6762fd17f3100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7ce04034000004030046304402201206418ad80ae03508a3872c3d58c0e999f6c24f46a9a1b98910618e11e314c3022043e43eb0283cf1c1d6d5056cc8c2a02fa260e4db3fa6c7436582e0d44d719c0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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