lafcbd.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:6e:61:5e:87:36:1e:75:fe:bb:fe:21:f1:a0:df:2d:79 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lafcbd.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:6e:61:5e:87:36:1e:75:fe:bb:fe:21:f1:a0:df:2d:79
Serial Number (int): 324095533958324089539635556801096106061177
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:82:85:c2:56:58:b7:12:2e:ee:2e:86:9c:43:9f:e3:19:0f:b3:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:bd:40:2b:bd:b9:f3:b8:d8:a0:96:67:a2:78:95:77:7f:6e:26:19
Fingerprint (sha256): ae:6a:8c:8d:41:19:31:eb:89:44:4a:d9:05:d0:28:97:7b:2b:44:d4:96:ba:29:f2:e2:36:19:15:26:d2:1c:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lafcbd.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lafcbd.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lafcbd.com

Other certificates including the domain name lafcbd.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lafcbd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324095533958324089539635556801096106061177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 08:36:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 08:36:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lafcbd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 928108846176870622326936912599983874568469408696018459054298752734230983740849310349298730272386309573677656994078112152430266773453595688854665663675132110810870701948968257211203093715046695024458655271161653359700612820657827157374038575021727894894845576621931584129765279077732338802908600504235921252655809851183398323511151901855109156403210029376319822392460349871226165048627007250045076174240822597732310685106999373755438355042049689753061525435468515353975169130479707198589696472739815291179709288542214378161192803409021117399457733940797385650733553387238428925515991725797081217232677297763007318608297767585477030169595102831765720881915365629824774688316789861812292857439989465267108138218373532081603404042764177033199812168269558584531655792607027119474777389099769404813970606788859353816980568152641955035814525772004884940637664991009697542374256063261118315741163557693462221706826254419791491208037254330677769742838372831642421465065635168993151102687570477514115385778362946372974616871218272152410697205132643932253797759179015044125357297417207271546493468843064535185887167196840173817239894273623662468495871601713646779391708927657824884173670219272438150703769712145445424597916981858150192458892357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f18285c25658b7122eee2e869c439fe3190fb33c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafcbd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017163726e9a0000040300483046022100d825dba440e6b6850a10a6c0d2f1df38de1ec72f9d80af0ed9cd04abc502e59c022100bbbf057dcc7976a5b499077355def0a858b2f2c382d4cf1a36b8f78a0094532e007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017163726e97000004030046304402204a7730d0e6bc4b6410af194750c70dc9565791287e10476e8524b42902c73dcd02201a256d1b73485b4c0282037fb1abcfb7543bcf9172e86f079703e5e69a81e537
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004baf0fdc07a7a08dd3f067bc158a8918c8c643901e1f0f9fa6b5a3c5e61c5253b23f318b7f875a5e4f740c523b74e4bb450ac6944700299895c3b8fd334988d2bab10ac20bcbe4268b4233637265e42f3b350fdfa40288f51b7407a75b444f3dfb8d86312576a0eb2adc7397a2acfb730e4187a834e1307e0e43a29e4c992b53f31b438c879c9c1acd76bd3b8e7b03fac2230a713016e221f685aa4c1e7f4eca4716775c1b6ffcd3aa21146ee4629d05535cf65c742e8dd2d9285b86dee4452af5580fbb72e45b862b13fcb79d1d9fcddb1e5b9ead1325511b088486c80d56e15f542511571b92a74635ec2aafc4aed70b570776ad148fb800acd0616420f1ee