codafish.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d7:42:9b:23:64:19:ec:a2:ea:62:60:cf:4c:70:ec:bc:1d was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=codafish.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:42:9b:23:64:19:ec:a2:ea:62:60:cf:4c:70:ec:bc:1d
Serial Number (int): 421698387186592809157336070609453145963549
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:e2:a9:6c:2f:9e:e7:94:00:9a:2b:c4:7a:f0:10:35:27:94:17:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:f4:53:5a:d3:8e:2a:a4:dd:4a:cf:84:25:1e:3b:04:7a:1d:84:3a
Fingerprint (sha256): b0:a7:4b:08:2b:40:d7:e9:b4:26:ee:9a:22:f8:52:e1:97:62:a1:e7:84:6a:c3:c9:51:d9:1f:48:72:17:9c:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate codafish.net

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for codafish.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coda.fish
codafish.com
codafish.de
codafish.es
codafish.eu
codafish.net
codafish.org
webmail.codafish.net
www.coda.fish
www.codafish.com
www.codafish.de
www.codafish.es
www.codafish.eu
www.codafish.net
www.codafish.org

Other certificates including the domain name codafish.net

(limited to 100 certificates)
crucible.codafish.net
composer.codafish.net
codafish.net
wiki.codafish.net
deployment.codafish.net
codafish.net
bitbucket.codafish.net
support.codafish.net
wiki.codafish.net
bitbucket.codafish.net
bamboo.codafish.net
support.codafish.net
exchange.codafish.net
deployment.codafish.net
wiki.codafish.net
www.upecajme.com
codafish.net
job-board.job-offensive.client.codafish.net
vacialanevera.codafish.net
crucible.codafish.net
deployment.codafish.net
service.codafish.net
support.codafish.net
composer.codafish.net
oemeta.client.codafish.net
deployment.codafish.net
composer.codafish.net
bitbucket.codafish.net
codafish.net
codafish.net
bitbucket.codafish.net
oemeta.client.codafish.net
starsforfree.client.codafish.net
wiki.codafish.net
bamboo.codafish.net
bitbucket.codafish.net
codafish.net
umfrage.erdbaron.com
codafish.net
forms.wimenetwork.com
analytics.codafish.net
hosting.codafish.net
support.easylogic.nu
oemeta.client.codafish.net
exchange.codafish.net
bamboo.codafish.net
crucible.codafish.net
codafish.net
hosting.codafish.net
new.development.codafish.net
events.netwyl-informatik.ch
bitbucket.codafish.net
failover.codafish.net
crucible.codafish.net
codafish.net
bitbucket.codafish.net
support.codafish.net
development.codafish.net
*.codafish.net
exchange.codafish.net
status.codafish.net
status.codafish.net
crucible.codafish.net
new.development.codafish.net
crucible.codafish.net
failover.codafish.net
etmgroup.support.ignitehospitality.com
composer.codafish.net
codafish.net
job-board.job-offensive.client.codafish.net
hosting.codafish.net
*.codafish.net
codafish.net
oemeta.client.codafish.net
bitbucket.codafish.net
exchange.codafish.net
portal.ezireturns.com
crucible.codafish.net
hosting.codafish.net
codafish.net
service.codafish.net
wiki.codafish.net
wesound.client.codafish.net
bitbucket.codafish.net
portal.ezireturns.com
composer.codafish.net
bamboo.codafish.net
codafish.net
oemeta.client.codafish.net
statistic.codafish.net
oemeta.client.codafish.net
positivomusic.client.codafish.net
expense.dyrtyinc.com
exchange.codafish.net
bamboo.codafish.net
hosting.codafish.net
oemeta.client.codafish.net
books.a2zcloud.com
codafish.net
wiki.codafish.net

Certificate

The complete raw certificate details for codafish.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pdqp4KEdkGTXHzWPvxO
dUy1eSY3u+ki+emsoQa0HUD7sXffRud7gE5/yZ/U1d3nTm6I6GDYUy3dwSCF0ExU
gGaYa9gwJzexcZMTc/FQW/akK+7XppRkbtREu+Qgl81UIYoTqaeVjczRAukMf364
QaAMGm+Xnw16y4ULWYK0NR3QH8oiDl+6caWcGbViIZsI0UB47n4l7GhMQFhusU19
9MkuxU+dpcNTDAoYawLfUthm+ufOCnMpOqBkU4MiO8YlHAgQ8NcjwdAg9qfMducr
JAsQyJDpDlBJEu9t8E4gf6vXpdk9rf0SDJOGUHDSvuc92jBZGQZle5+91BpR0RJd
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421698387186592809157336070609453145963549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 06:47:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-10 06:47:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'codafish.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27089663580169284292526599965552592516680033571548495240209068468023764535127542804712665723789768432795284504546332463951834568874028152821059927535144649015013659770699992222434710185590359460387976444089116122447910119696167782978090597373889410738005760690107804530548831110310982915354466594797594314024941485154988253856057104889057470707590839309381057217240316576232879580728646230539343237506088110572699384788082705268513695917028455515854506037145808564213484859205379621595864246634915187651933297259999372602486373707906719690951380570315912025870249213875256790669518693132738756610635293400442476846491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29e2a96c2f9ee794009a2bc47af01035279417d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coda.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coda.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016797161be80000040300483046022100c0161b9bda7f7a2984e6d642d1d9d66b459ac102cdf3b00d160635f67e0222c0022100ccefdda629efe65edd354e4f49c1be4dcf3b62922385afc159fa065c0dfc4fc6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016797161c6c0000040300473045022046c4ccfcd4b86d999cc0241ca1da2e434b8776ffa53d859a042cd1d2592c94a9022100a1d6600f82171ff78251e9ada249c324cd92109eba7c802573e8551a53dec83d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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