loca-web.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:25:ed:b3:56:23:5b:ea:1e:5b:27:5c:16:51:58:90:06:fd was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=loca-web.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:25:ed:b3:56:23:5b:ea:1e:5b:27:5c:16:51:58:90:06:fdSerial Number (int): 274243263574582823653971193077622163638013
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 50:20:6e:83:37:55:be:83:90:44:be:02:1d:d7:da:60:08:7b:50:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e3:30:34:f1:69:45:81:26:3e:a3:06:41:75:47:11:a1:4a:c8:74:65
Fingerprint (sha256): af:51:68:4e:5e:45:d9:65:98:5c:86:7f:f4:39:6d:19:01:a1:d8:06:94:47:94:fc:d4:9c:49:bc:f4:3a:b6:01
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate loca-web.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for loca-web.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
loca-web.com
Other certificates including the domain name loca-web.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for loca-web.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISAyXts1YjW+oeWydcFlFYkAb9MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDYwODUxMDhaFw0y MDA3MDUwODUxMDhaMBcxFTATBgNVBAMTDGxvY2Etd2ViLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAN9+xsonz9hpVLdCtxIwH7NwrCHGj6KFQxYk VJATO21WUoS6y0ZSZigUYdsfprH5soUECL/PI6f4p5uKTEA9cLSrKNmkzpE+o4pW nxgX9kvZ4dSVa9ECIvN9P2Cz2Rpzezmi6kfkk9BKFIpIfcNe8U7HHpmGaQfYVO+3 5ayYjy6DgxPoD8lqJf+JOuRsCwK+99YmB9qKMdYCrzCtEPsvlkbXdPXfE74xjCdK PIJAHkwVkP7hzR22L03NjWR6cjgtaYunjB/d5ikY2xSmbmOBP5CHlSTw4vNnDJS0 KAtoc/maOHArYiyHHv/5ry9UFi1E1+C1tKENM/M8TEbUkcJM5lwjdH7PsORY1XWc DzjZTCnIvuj3eTZaZd2LKtn83N2YGiNE7/viabLeAU9mFfsahb8OciyA8YAirSz4 Fr+KASYT5PzEp/ND0mnuEngonJ2OlBEiPy0KelTiM+a1NHfiSY2MVXQEUCu2Xn4e TGT/nx5kvQSpB74FzmTKj8z8Z5CHkhHVCA2t6sg6pfbscZ0a6dMbqyJ4leWgIHjn pDjU+up9u4LxOa5mgrnGChc2T4vAKJCc81JjXJghumT4e6Ennoo02flLr45r4PB2 RZKMfyJR59nXIKs1udCUYnO5iEMFaxWMnG4pr0oVkm5IuGr+b8sM7FGT1tz52+1g hBCTZgW1AgMBAAGjggJgMIICXDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFAgboM3 Vb6DkES+Ah3X2mAIe1AvMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMbG9jYS13ZWIuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHYA5xLysDd+GmL7jskMYYTx6ns3y1YdESZb8+DzS/JBVG4AAAFxTuaccgAABAMA RzBFAiEAgl/3CECFXXrGg8Ca9ZHZo/XicR+dVlp6kAkg28rEcygCIF/3EBRvAoWB HUPZgd5UeybaVHrwQF3w0gMFszlq6FbTAHUAsh4FzIuizYogTodm+Su5iiUgZ2va +nDnsklTLe+LkF4AAAFxTuacbAAABAMARjBEAiB9gzI+jiVouljYzaVN5yRTkPWm x77aB1Du95elA4/IGQIgM4tkQcWiiqSqxoyZLZupIpyvNvfu2Qc+z9o8jl8HX1cw DQYJKoZIhvcNAQELBQADggEBACEywrhkAiwvRAWxVCCbJgjf47VYQn0ejHp1Yq5E 6nUrmOFKYchAfDrrrH26quwmmqjMXe0g+jbQksI4b/q9rQV2qGU8dGd7veXwVqAX yLFaTKiMdP+sA6Jr1BU1kkyD3v1gzbtXJiiE/kM+Z+w8wW2Adffm9GlB+WPKrdcK z/IC4WRAXOqCQuZhN4n1U8gFq5VLNiYi2Wb6m/y4Uli4M830TE24T/eVRladmH+U D/HkQZrchMi4ZTBY1r5YDxSryHSvflX1r+Hi+lftwXYcym2Vd5feyaVHo7dywS6b O0/k37Jvp1/zw3UZ6Js1ZaaciNemM9ItZZ4GVkoUYl/c+hE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA337GyifP2GlUt0K3EjAf s3CsIcaPooVDFiRUkBM7bVZShLrLRlJmKBRh2x+msfmyhQQIv88jp/inm4pMQD1w tKso2aTOkT6jilafGBf2S9nh1JVr0QIi830/YLPZGnN7OaLqR+ST0EoUikh9w17x TscemYZpB9hU77flrJiPLoODE+gPyWol/4k65GwLAr731iYH2oox1gKvMK0Q+y+W Rtd09d8TvjGMJ0o8gkAeTBWQ/uHNHbYvTc2NZHpyOC1pi6eMH93mKRjbFKZuY4E/ kIeVJPDi82cMlLQoC2hz+Zo4cCtiLIce//mvL1QWLUTX4LW0oQ0z8zxMRtSRwkzm XCN0fs+w5FjVdZwPONlMKci+6Pd5Nlpl3Ysq2fzc3ZgaI0Tv++Jpst4BT2YV+xqF vw5yLIDxgCKtLPgWv4oBJhPk/MSn80PSae4SeCicnY6UESI/LQp6VOIz5rU0d+JJ jYxVdARQK7Zefh5MZP+fHmS9BKkHvgXOZMqPzPxnkIeSEdUIDa3qyDql9uxxnRrp 0xurIniV5aAgeOekONT66n27gvE5rmaCucYKFzZPi8AokJzzUmNcmCG6ZPh7oSee ijTZ+Uuvjmvg8HZFkox/IlHn2dcgqzW50JRic7mIQwVrFYycbimvShWSbki4av5v ywzsUZPW3Pnb7WCEEJNmBbUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 274243263574582823653971193077622163638013 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 08:51:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 08:51:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loca-web.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 911780951725311744649767996138642666706783227856309156474678043349730707250250839626374961384475300435870471954604378632407832321582496319203396592805501473564378805527517842342914451980150351237335415109544529409597884001602873342317322462033878424708947584594498694227536780930227427495807156857108475918568978120416591014752331866770134975834913474409610761919755535624160189908087711247172078849820383606420753589581281516801365513813179537586921919357849752344870464315167086174435353026706163825249436444595259846313214895430092012818926716166421056585467964037186571365408907273715630169128788067865519233264505440785112805240882094648025707734311865748146601336066184607546903609830663070716914300351988846777474818360709013924360859236099422635516709717129835973055830273346117103132022789323682171383758355831814539842002441443463748015618091069880479273673900077197565002965019566960492164378358157171789122448462379217690073695875928584753341591996285122122263020428988189118167739574695071305107889260708597965033575841173728043904415317206982628981598267945784591905973995138501745697799453824026844126752148470530378196092081746415313266907129671884667164972848931049349704667568950386264754582626982769637715809273269 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 50206e833755be839044be021dd7da60087b502f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loca-web.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001714ee69c720000040300473045022100825ff70840855d7ac683c09af591d9a3f5e2711f9d565a7a900920dbcac4732802205ff710146f0285811d43d981de547b26da547af0405df0d20305b3396ae856d3007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001714ee69c6c000004030046304402207d83323e8e2568ba58d8cda54de7245390f5a6c7beda0750eef797a5038fc8190220338b6441c5a28aa4aac68c992d9ba9229caf36f7eed9073ecfda3c8e5f075f57 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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