capi.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ae:1e:15:40:24:1d:a9:30:2c:02:26:e1:a0:bc:a8:85:b7 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=capi.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ae:1e:15:40:24:1d:a9:30:2c:02:26:e1:a0:bc:a8:85:b7Serial Number (int): 320585976818567217375520353694576045229495
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 12:79:63:47:6a:e9:3b:22:47:db:d5:80:c7:fc:da:0c:de:00:84:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fd:74:5b:ee:2f:59:16:23:9c:31:3f:a3:da:9c:09:c6:eb:a8:ae:45
Fingerprint (sha256): ae:b1:a4:00:4b:cc:2e:ca:a4:bf:d3:f3:3b:b9:98:c7:62:61:d7:26:17:11:75:d8:10:f6:50:2f:e2:d1:ee:9c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate capi.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for capi.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
capi.net
Other certificates including the domain name capi.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for capi.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgISA64eFUAkHakwLAIm4aC8qIW3MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIxMDMwNDlaFw0y MDAxMTAxMDMwNDlaMBMxETAPBgNVBAMTCGNhcGkubmV0MIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAwolGFBW94uXoygXFcjOIVtWGpU+qNOBDm02XonlL xQcWjeI4Wf6TQMUlgPuV1Wv37Ewp3WpTOwr4vslTA20FPB26R2tV822y5Ja7GY8K DQ2hJTt9iDC3Ozeds1fJqRHKjzWa/RbxZWafdqkdTIPUf5kNad/wYZetFv4Fdb7t sobK8L7mKDY6jCWRIwTrFsyRjkFtZjx2O7gLbY+VKFVIEKKLZCt8gQ1NAbvkVGpf ZhQzdvKDb481TTto7NN1344MfIGPW8tY8ofuIETwnSaNz6wL8KrNQxv7DUYOMsyi 910TGaRRQ9Pi5uQKVm70SOOfRPAb9BiQUsC0fmih3UOZsmjHeqHMSZDCF9xEmw3d oHb1k5509NH5B6E2t4DP5AdbapSIJVoIcWiPKCADxuNb2pHGqxYwcEh08ydGLrda aDFVrwlmBRZ/5EI7MVZBEW8gXkARKmcXJNDkAp8vCINcV1uumRRPHHNetF3AOSDr rAF9Nq+rzxU/rvmYUFWR9en13g6YARveRPBDSLfdomIgNHru4qt/NH4nq8fVtVnf cxNRltG5VzlxNh2CTs1Sf24FgzZMs2dMFZSJvi3pxefWk195xSBOZo9BSRX4cDtT gz4/u/xbVbossbYW1J1QhhSaZrNQ6qQnjX4PkMAWK1MycsDUpJes89pIfrYFAvgo uTUCAwEAAaOCAl0wggJZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUEnljR2rpOyJH 29WAx/zaDN4AhHowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzATBgNVHREEDDAKgghjYXBpLm5ldDBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AF6nc/nf VsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbb+8Q98AAAQDAEcwRQIhAN6n lsiXaeqQHBIvOB1c0WFngXjyP0AQf5eCuUAPvjZUAiBqS3gxezEhk/DATbK8+KkA iDJljlSSnfTLr6WXDX8oaAB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVF R/R4AAABbb+8Q9EAAAQDAEcwRQIhAMuMJXJhRiKZbh9Cy3GVWdhk9lGMR+hZRexm hd/4nsnSAiAk+JnwSN0u1LPRa0rTgAdrqjCy9jopLWnfxGIMf/TlqDANBgkqhkiG 9w0BAQsFAAOCAQEAgO2KHidVY4MqpjeD/xg20msmSmRMtqr9NzhHTMlnwhpBoDla GbuZd7gc5vwKtHhbFIQL+tkvqRI9Yp7eNKbkAZTCQfzplWdUdEnelspouaI4hPhc PmCTQYrC/AqcGghVICYHc1Rfmfo9DEyS/IOZU7wgXIDcb+RQekhcdbp30gtSrtDY qiu1g0Kxf8qlig6M+stTCUhFIzLmXvX92r4oDjILSAHerNIf1G8oFGRLkj7BlZEb lQU4GwqTAaiox4Tadv1xnJeeI9J7J9BcbqGvVzE2zy/u0ZMeezSE66zl1Gu97asV BlFxL18mNW9DxeFpLAJz93mt/QDfbo/SeT6EdA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwolGFBW94uXoygXFcjOI VtWGpU+qNOBDm02XonlLxQcWjeI4Wf6TQMUlgPuV1Wv37Ewp3WpTOwr4vslTA20F PB26R2tV822y5Ja7GY8KDQ2hJTt9iDC3Ozeds1fJqRHKjzWa/RbxZWafdqkdTIPU f5kNad/wYZetFv4Fdb7tsobK8L7mKDY6jCWRIwTrFsyRjkFtZjx2O7gLbY+VKFVI EKKLZCt8gQ1NAbvkVGpfZhQzdvKDb481TTto7NN1344MfIGPW8tY8ofuIETwnSaN z6wL8KrNQxv7DUYOMsyi910TGaRRQ9Pi5uQKVm70SOOfRPAb9BiQUsC0fmih3UOZ smjHeqHMSZDCF9xEmw3doHb1k5509NH5B6E2t4DP5AdbapSIJVoIcWiPKCADxuNb 2pHGqxYwcEh08ydGLrdaaDFVrwlmBRZ/5EI7MVZBEW8gXkARKmcXJNDkAp8vCINc V1uumRRPHHNetF3AOSDrrAF9Nq+rzxU/rvmYUFWR9en13g6YARveRPBDSLfdomIg NHru4qt/NH4nq8fVtVnfcxNRltG5VzlxNh2CTs1Sf24FgzZMs2dMFZSJvi3pxefW k195xSBOZo9BSRX4cDtTgz4/u/xbVbossbYW1J1QhhSaZrNQ6qQnjX4PkMAWK1My csDUpJes89pIfrYFAvgouTUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320585976818567217375520353694576045229495 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 10:30:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 10:30:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capi.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793638558630627365867573194627259072092749748526074959858767456204247904974829395626040797389091691276710059875792739117843770724864185452514433149946423370726934536859255564582050333955550209972257289331919526791059300151465358481257787914249892218739351715530947599986143725560949769019111237246920176087210793537915972689153834276963919022181956135267365656283269122431748971934846242246234157538555271310856703161191858925526347196677814309444354833893812295963660440908175939437466094901487925691709445757774744560682477376456255848990436957320557151452568734111280010958967149670554778596919776130872008731738677757330908231531877767665796839590670351039085561767622498822455608480345517416324056251792592992543867621734092651639584506150250969861106068428443293480133814396922835497083229154679543990841024117321663922536895046236740296634412096465926119404943616008202019571714487963643561595897587186461311736763604280575565947561854830652656577254758034837385352640198033198092711864668030745288485289849989949021404969548106550685705074463030613776212889424904351594351181419847220233874855404966911408692995717142942258436932140811983341269918796539943759612088247224811737380707512215968215790841229941558512388638554421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 127963476ae93b2247dbd580c7fcda0cde00847a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capi.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbfbc43df0000040300473045022100dea796c89769ea901c122f381d5cd161678178f23f40107f9782b9400fbe365402206a4b78317b312193f0c04db2bcf8a9008832658e54929df4cbafa5970d7f2868007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbfbc43d10000040300473045022100cb8c2572614622996e1f42cb719559d864f6518c47e85945ec6685dff89ec9d2022024f899f048dd2ed4b3d16b4ad380076baa30b2f63a292d69dfc4620c7ff4e5a8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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