www.californiai.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:5c:b5:06:9d:e3:00:49:0c:30:07:b7:cd:f0:dc:9c:78 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.californiai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:5c:b5:06:9d:e3:00:49:0c:30:07:b7:cd:f0:dc:9c:78
Serial Number (int): 326794301159648064567784081395651706657912
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:eb:99:86:2b:44:b3:dd:06:23:82:f4:b6:03:c1:1b:b5:4e:a9:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:5a:26:4b:c3:9d:fa:38:c7:8f:1b:70:47:42:00:1e:9c:61:7d:77
Fingerprint (sha256): af:9e:a0:a9:64:ad:f6:12:83:92:70:de:9f:7a:e6:52:91:67:b2:42:a0:79:59:c1:13:f1:dc:6e:2f:2d:13:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.californiai.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.californiai.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.californiai.com

Other certificates including the domain name californiai.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.californiai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326794301159648064567784081395651706657912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 18:46:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 18:46:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.californiai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787577658486357028463348905587293159641232765066697193603884661336021561181976260954964165151151931058392417670561826505531602562444598434590038819429804765300386971176140374700997743377556475839984791976326396508585510881974438097410261848961712503000811004327400667461673885100153114945971006268804545500470914732044619436734825121132033464318169511114188865821710932286438496268756220375411263988750079090638148915167086702734885188104008946276871825416081093460313855438416021176459188431826265526302157110083676045758777972103394379270899231344853283183137288696493511430149084290398053555815991564294917529207657821714012098713540112182416515823742555561644867806176632757840914024424599876611512217348316289540511508580943424146731269620364587153762807027654544157967298893418391701916020691150438742546563584155946063511951159060853427878708565588415710401501813330752745276430192904114800323638165612724831540050222662391453250260965845287624071767658972142851127912758127627815955183634252425885258751265281748407526565018269377282808601796093601619016993431796078404295222864673376304416156476526001173680854527348953221825710609299091703279895096831795856063984564114814289457461021799910114376422508138630469859423501701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9eb99862b44b3dd062382f4b603c11bb54ea996
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017064238eea0000040300483046022100b67d8af86568990ef1623d974e2dad68e86e82031f6433f3dc8e2061f0d43227022100d82ee8c735d370ab062a1b4f0e6676ba1e8cbe7b43696ad0bf2ab61ed8abee12007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017064238ee0000004030046304402200fd95dd2c87fa7887caeb517bb6a9235f2a0d4278840d46cd650b3160a1e737e02201d5d6c7b8898c94667b2f5407eaab54c119624bc32e0288700fd10f40f9d9da4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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