www.cosima.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:c2:7c:6f:41:b9:22:99:2e:7c:1d:0b:a9:b0:cf:73:3a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cosima.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:c2:7c:6f:41:b9:22:99:2e:7c:1d:0b:a9:b0:cf:73:3a
Serial Number (int): 275206668804665603598812939316644027527994
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:78:22:dc:9b:05:58:c0:2d:0c:4e:d5:96:34:a2:e3:aa:89:d1:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:8d:cf:9d:9d:b2:2f:99:23:dd:7f:81:36:eb:66:19:a0:89:17:e0
Fingerprint (sha256): b5:f4:04:30:8c:77:65:44:c6:aa:53:48:be:85:60:00:28:08:2b:5b:21:31:f9:2d:51:26:a7:fc:09:01:b6:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cosima.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cosima.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cosima.net

Other certificates including the domain name cosima.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.cosima.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxdXCGmJSWENBO+A24cya
oLsC1QxsZvBJF2JC810/L6kX/ndSpqiBg6CM3yrrrJrA0gO9yWRJPjMz5rOKy9Xm
9W1qVKUgXa8Wxd3pGcETIBaZIzC96u8mBuJeIUFeIlGXX4m1gm7/Hs2NHntPNzVT
hPNXMnTLqcPSrDC61OfYTAme3Thizvufh9+aLeM+DLdpbc2jDK/pWSEneUZeSW3Z
5pN3bK+rD54HXBCedHz2GLpT17xctZZfa/439GteElS7/9tRFTl/06g11hyfH+59
yz8WT37/6o0IgBECgGPQssEAzvvpYOkWUhV5eegb8E+WjmnyLpjSGyGVDNG/6SCz
SjQ9D4pPrZrqYrq9io0RzIqnsApngHrkBZsxHyzjBYNdZnYFYOb0aCNqnZcq9MRI
sSVRxfIdtkP0HyPwdlaJPAqQEQ+rH6icb46K++FvcF3Tvb5Q4riWhkVsdMeY1kH+
pArl2bI5hOALw9KI4JuaAB/cwCHCjocvthWpjD9apiOMwp3XNg+QjD7HkbBJxh4/
8Ygf5xhZkz/YKobGxL3ueh1PZBMD9v+0/sGPqUqAOQpNb3mD8WKZ+iYrOBocuyo/
p1CMwG5LSEq8S7C6AW6CguxMTNe+fIBgm0yoYeV66XaMqyS3V3DMTyK3NOXvzHGu
DLy0hY+rA8rNARNBU1O/LKECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275206668804665603598812939316644027527994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 14:49:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 14:49:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cosima.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807096355752223520877660455935736065335172370672088608232370433905279754084119351838084466898552364726077171050028216722518627974714623273104632468266742293204386473484866649609405672925791890470118880831367407501456113483572465938613329816127654076030206565512941981377909319054622714526842853281606580851622018583370771846318660819821268751796400961323344528497571405167944301681665862243514066707301723555805184037670913719639661731285883369815875375973861224128171270760945120927464681324908649846817148134894395393313424368029597266841632256714515473917557949180896743299741813733878185951193756538417746059849379850418873152668929099350242613296823338545456265449445466280716644948388811350827837850450748706610169843110628119461011307253174177437151310610185382627755354534316148843310376743041475515802001664411161910078323932702556425000000883571986363835334342121343670208781939996897027044527445158090951054856568210053272509660543218284803787521314014527557349346674647201147787883385095632445861800337017638446330026709918083769222294758022795909087876532476650088134802367373609040064699459011794597477195059973372894061885258091383864110554322086115773789631428786869509089460355456679786711957208454045114859949862049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							277822dc9b0558c02d0c4ed59634a2e3aa89d15e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosima.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001704463f8c60000040300473045022100a62d721558b41624c830b965727cfccb040239dc9d7b4c602bbdf3142b488ba2022063b3ea2d865945119215a1ef04c7f6d4068f9afa2e687fa2a49f6fc1f88e3b7f00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704463f8b30000040300483046022100cce190b5173b07e76516a81a41393509d1d0ae4506f5aafddb8156b98e9fab3e022100f94fd5e621c0e7a2a46819932459d8c82d338cff60cfda2c353be19a7b08046b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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