caffettiera.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:15:a6:e0:1a:68:56:9b:28:77:a7:e3:ed:60:c2:49:3f:51 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=caffettiera.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:15:a6:e0:1a:68:56:9b:28:77:a7:e3:ed:60:c2:49:3f:51
Serial Number (int): 355816888889786484037392805278752703070033
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:84:ec:b3:a3:f2:ca:d8:22:f3:4f:a2:23:d2:bc:be:6d:02:aa:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:77:5b:85:dd:08:24:85:57:e4:21:40:5f:2b:e0:2f:bb:aa:0a:09
Fingerprint (sha256): b2:6a:14:2f:b1:a8:42:ef:c8:29:d1:79:49:ee:bd:c5:78:c6:42:3a:9b:bd:f1:70:17:d4:9d:5c:ac:6f:8e:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate caffettiera.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for caffettiera.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caffettiera.com

Other certificates including the domain name caffettiera.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for caffettiera.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApwxYhpvayM5gQcGchYg8
bxDfAJ6n1LXB52cilulhyj8OkkkSLGja45EprZXBShRZyFMGmw1PBjtHn787EMoh
mPnIlWSFOFSyRwQ28ccRX8dmOHnUCve6zr5n4BArmVZQdvbkmAJWbmxnXIrrUonX
slgQV71lrhjtsNy7ziw52Q8HixPmoXpBc2+yu3R1noRc5+S5slNvSPvUmvkSGwlv
x1eCfJ0OnAiEvie45h204S2DUGMiSODgmVtOixaVJLlIOcklFqaI5Mm/iCVu4Nb9
aPrroPDmLer9rEnKKHDzq71NFmayOR4Waj166udbQEKmiOO47ZhRvbUQSmunHf3+
iW5qY1D66o+J/DK5GDiWbj8CaGZ+TA4l5/R/TxoczZTbiXUaiJbzuQnO3E1pTQFT
XyiF+VYQSb+b3juJmSp6xD5RQ1bojgewG5CWg/2m1Cty9wtsI3+AFrQvob6qtKc6
34FT7lqqEPyjX9mUsuxX89EvEGUoHdsAxqRgwPKrAvsB18zoEoLSplyQChb1wFpk
kNRL2K4bvZaWMwEs3ECR6JSKeC96YTgoyGZ0OxwOrb8jLNPlm3C60eMSRSAIjw/1
quzLXxUT1MI3LeJ8jNOrB5gBEzxf66/VIxaaU7tE2BvUKg9vteT59n4yK/NLUbZb
aieWlqRu81ngQ49zmLuD2QECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355816888889786484037392805278752703070033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 11:30:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 11:30:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'caffettiera.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681497303444988230513797965709433290515853685480134913702514912205971177695399831288459912305723186695151711039625595413280516793907092774452827052148981413112244633042256463061189106719167488478803884513833169419554221929354218096799377164199913301233519545309888334531686698817413941150761066566841260211308891797777778176938554081387666449859418719848232177636515041751392763290724773018750077067314909968670166991300666072984370565421581797403383616898978717260362446421241069240229645419114124699240757946501074864654006942406464965079401538674416220415729284796456502095762554064681367149866121199066181207601804362738840627247324360753064214077421316856864365394136344500756354946373494720283634189319267525050424881834180333019756855600884122015788146598299725693544217666482247728662565363038823846726214508328761344994934345068176833967654577451478736635306852364468163869967921683967102532337516801237394342476635204373736334875070573191018927850374295474931665038292229048699889604836378676105813615509251388582173101954051652309154811457706323182077673073679515065763157033603091790541788564968250996048320432263827909633451563114066043415860728816029909611959118950263704000883890137767237490128010915110743871718676737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a84ecb3a3f2cad822f34fa223d2bcbe6d02aa44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caffettiera.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001716412278a000004030047304502206349e6e12f20cb8d43ccceb9ad176887225b09816f9de65d08178e630235ae87022100b70ee9def9078f374437f725b11b0bc711876d4e42b0a0d6717956df95a1e55000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171641227c00000040300473045022018d88773aa65c9fc720cdb09329206a0f6a886b4343dae5022bd35ec12682351022100d09bab4f97be458e06f4bd9dd58dbe57bc3dc3dbc428371fab6e22ca955b9d75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00662885c1a0a5b041f3de54c59b678212be7f2e30882592bff9fd9f7ce72d62635072fe1e1aede60d3088c27d392a0eeef6f6b9c52b8c408040f2e81844cb9cde3fc7b5d580397cf8b062aa416d2c95567ee2267cc3c20585825d72dfd81415546acf44c0877af503136aceb20e354c3d540fdc63e501cc0a1aab8b5867efa1709cfee8196283bf82aab4e8c30d6a00cc7f707c8f6f68a6ad2976c76a9e81fffe7daeb7ae93a7570af4d42dd05433cbd22c485007c4d9450b9a53499c877570638110ea08e1f30d42b4be6824fa3b99db1f6b1ad8ff4425aa38a4d398627a490f2a8cccc2b536431454f4a96979098a761167043ce4d147e48a5cf18b7d954cd4