thermofiber.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f8:4e:e2:fb:6b:a5:10:b9:15:a4:5c:a5:0a:84:92:3c:35 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thermofiber.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f8:4e:e2:fb:6b:a5:10:b9:15:a4:5c:a5:0a:84:92:3c:35
Serial Number (int): 432944029065608286983609266278774030351413
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0f:25:2a:de:a6:a1:6c:72:bc:5b:9f:b5:fa:c3:72:f5:37:24:ed:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:ca:fe:d0:9b:35:1a:20:7e:7f:4e:a8:d7:3e:cd:46:3a:5a:c2:a8
Fingerprint (sha256): ae:53:62:7e:7b:69:82:9b:28:99:d8:93:cd:07:7f:0e:d9:77:24:f3:f3:ff:d7:d6:18:e8:8a:d9:4e:09:6a:71

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thermofiber.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thermofiber.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thermofiber.com

Other certificates including the domain name thermofiber.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for thermofiber.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432944029065608286983609266278774030351413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 01:39:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 01:39:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thermofiber.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 906736431017054877721250627936991035618655769600065021793388389589368159338630380027042101300044798047647032808655498423722282422076522190660291254706355831075860884838596010195715654927515642555586072606685925728724288819722545923040720177491455921843530601325782435623846671737433836271863921738322099842229795616206622299130308753325043171309230599799090763174563463927787297304476520424624299506163663231447162885505310077895141628059002923703834245747771283099260980138457007670296580349310331791182341840594352128395992981914327023948188753314325041475525061413216099757295714672367936038415602167189303872526455758251331136379213673600820175257484891464798544416248843836988627377088824355099322463634349648439839990701049406907639078618016718220358252994296326863562131538858461265826339409318450762608274595999341359625072869102275630026116739909832557576768570867163280730177847611451745052473627523001105572442321901498049371110864390896337171474155159632284778816496520010882549371027857152139710665742813390028365389838106543203220604455938499610797712836697075001130753654203708245093780370944831472857954729221908597031667805948991847627298273132462662174253357692324649839029143178294165619910036836774315983813192699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f252adea6a16c72bc5b9fb5fac372f53724ed07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermofiber.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbdd5a5270000040300463044022037b06819e471e2f78dfc2a9e76e127ee340f323616856e023d8ba463193430d202201848713719021244731ec2dcf81bfdff832c034ccad20b2662b5bd5948955435007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbdd5a64d00000403004730450220337c1e33692d9b9bf9781e2fbb81a87146cbd5159439979b6e0b3b405db07002022100f412032e23bad7b2e306d13ea561557814f3973ca7aa770cffa525092f190a3c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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