chuft.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:65:b5:da:ed:5b:7b:91:f4:6b:71:ca:f2:26:75:f0:ef:9c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=chuft.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:65:b5:da:ed:5b:7b:91:f4:6b:71:ca:f2:26:75:f0:ef:9cSerial Number (int): 295947103856426837074026380413910559813532
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: dd:c0:c9:14:3f:87:ae:7a:98:a2:32:d4:d4:40:cf:a9:1e:6b:fb:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9b:05:2f:6e:1a:e6:20:c3:6c:c3:e8:ad:d5:49:82:b4:a1:9e:4e:55
Fingerprint (sha256): b7:0b:29:d4:69:29:63:1e:3a:29:8c:e2:27:d6:5e:5c:eb:dd:6a:6f:b0:49:e3:33:fe:ef:5c:f3:77:6e:a5:0c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate chuft.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for chuft.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
chuft.com
Other certificates including the domain name chuft.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for chuft.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgISA2W12u1be5H0a3HK8iZ18O+cMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwNDA0MDBaFw0y MDAxMTEwNDA0MDBaMBQxEjAQBgNVBAMTCWNodWZ0LmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBANALnBOEpDNWvrgEeSt8bu5g33np7laGNQ2Ep7ki khHs4eMbjx28jG5Zm6cn7fUOhLs098hPSO+ZlnFlSCFrV1p9qj/Xqol09+G8hBqg J8wOtovTGuIecrkbcBqbaeiM6jZM9hkWVBbShVxuQyYnk+8zP8A4X2UEsLUpa75Z tlLqoEuRPfn5QyYBVHw1p9Qnt6SMFY5q0emF0B/e+wNtHdd7rh79EjNMubDlwWvw RG66l+b6kLQfdeAOWlhsUDLV7AMZ+fSEG9UBtalo+rye7eSnYMeDj1th1cXzux5l 9+FDYFlty8Z0HfMiWkP+RxTtIlVdNSrslti7Fg2oX+qSHk1LgUEQBfq9DAU7hzE6 o6OWye3Y6v+8cMD9YLu9RbOYdE0vwWRWX1I0HyAorlRPDvBXnTPCqVkKnjLBnRNz 0J2nCUfTQvzoM/lxF76vMu2NnvB5lYwdkY4w00cNkno9N6d4U75wED2QiLf5Lf90 tRMdTkvAhe7X65lYaBzlB6ZO8OH4CuGHhJQnuqu6WVyoRzmuKt07cIVhs3HclNJJ iralJouAvaQ0gkHChqUpWycjR4ehCxmQmjhY5TNNFsT4TVRmutEJWcxnokCKAOiQ +MSI5T4ROz7UKGabJI90eEtUB/6kPufd6SGOv5FnyoGRFQrxJLxH5u+hf0JxRJFz P5EXAgMBAAGjggJeMIICWjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFN3AyRQ/h656 mKIy1NRAz6kea/vcMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJY2h1ZnQuY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFtw4B9aAAABAMARzBFAiBV GjH1QpzFZVYxpQJDJiQZeQe9QFMol5NII0Q7TyTjXgIhAOV3yBgiXIK/jAPafM50 wjsEQcdVEsDlu9wlqPvs8hK+AHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0 5UVH9HgAAAFtw4B9cgAABAMARzBFAiAWQxvlyTQbaKj2Vw9FSIaNN1t0PYbeNgsh vWgcFhYkOwIhANxE/VlrzWdjXF26icApAAYblE83V/Q1c1lDOMPvHlLCMA0GCSqG SIb3DQEBCwUAA4IBAQCQwWpvBzOyXD0kVbVSjFUun8ANWyp3LyF5TNd/65/jnOeL 2OXyzawImCySSULF89MY1so8i0rXrgAx2Ytsun3iX7Q/hZqybV23x0ge2eUsqNjK 9BLiS7ryO2kt1kObWAjJXTIFZaDlVj4JJw2lB/8dB4bSqxZDl87OX61eKyhBNu+R 5jMkfhAyr4FG8RjisiV40Nsw4E/Hy4mu/S2stUyAQvqzcodO9Gpkx8NiRgWKFWZZ Cgsi2euJhh+IwklNaScl6Z3Y/KnEkh3ghMwfcdep3UWUrE7HmcWQtg5zmO7wytJc ERhmhuCyO5WcFy1m2XOlYY0SjsOks6jyiJFBn2Md -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0AucE4SkM1a+uAR5K3xu 7mDfeenuVoY1DYSnuSKSEezh4xuPHbyMblmbpyft9Q6EuzT3yE9I75mWcWVIIWtX Wn2qP9eqiXT34byEGqAnzA62i9Ma4h5yuRtwGptp6IzqNkz2GRZUFtKFXG5DJieT 7zM/wDhfZQSwtSlrvlm2UuqgS5E9+flDJgFUfDWn1Ce3pIwVjmrR6YXQH977A20d 13uuHv0SM0y5sOXBa/BEbrqX5vqQtB914A5aWGxQMtXsAxn59IQb1QG1qWj6vJ7t 5Kdgx4OPW2HVxfO7HmX34UNgWW3LxnQd8yJaQ/5HFO0iVV01KuyW2LsWDahf6pIe TUuBQRAF+r0MBTuHMTqjo5bJ7djq/7xwwP1gu71Fs5h0TS/BZFZfUjQfICiuVE8O 8FedM8KpWQqeMsGdE3PQnacJR9NC/Ogz+XEXvq8y7Y2e8HmVjB2RjjDTRw2Sej03 p3hTvnAQPZCIt/kt/3S1Ex1OS8CF7tfrmVhoHOUHpk7w4fgK4YeElCe6q7pZXKhH Oa4q3TtwhWGzcdyU0kmKtqUmi4C9pDSCQcKGpSlbJyNHh6ELGZCaOFjlM00WxPhN VGa60QlZzGeiQIoA6JD4xIjlPhE7PtQoZpskj3R4S1QH/qQ+593pIY6/kWfKgZEV CvEkvEfm76F/QnFEkXM/kRcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295947103856426837074026380413910559813532 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 04:04:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 04:04:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chuft.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848750979167187013949808232089380608749683346008849572053047171022202656777006603430555813845371291600994607141990017428047450025322440040941500711919785898973060091939017933568665900636442687957576609784141096009440714865997537190260345365266778016085457435558445513908250277477750706941070505703427702170477228644855569974476761839675397299029047748818788725837923870211281972833589240709664120335812618420045994728158085911802166214369935214464993290907678680877656264146625253230183869670465260421207853576308085414403957469885723341820951535017451274582507966936978659297457943030477368623845660261630928161715896726478970908979910461553930124766149000790171734106970662237918538471400936013321959008560642791518606766950099985217675391984232349845134496559453758028230007175794949807669768443244967947411200772495007438208882264925428492870633479563831026897788434858888692282642523555369083945343036015892123723825225110084432280702640927011234228685254872893349176719123430767084988683489455880419597812277170713159005407444926555529070447035302693580703460519207024177026299853632452233128363524901365440711992767592124230977680797313299302525050266736169428985184878541823641681886596099533281831109503265759664454305288471 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ddc0c9143f87ae7a98a232d4d440cfa91e6bfbdc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuft.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc3807d6800000403004730450220551a31f5429cc5655631a502432624197907bd40532897934823443b4f24e35e022100e577c818225c82bf8c03da7cce74c23b0441c75512c0e5bbdc25a8fbecf212be007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc3807d720000040300473045022016431be5c9341b68a8f6570f4548868d375b743d86de360b21bd681c1616243b022100dc44fd596bcd67635c5dba89c02900061b944f3757f43573594338c3ef1e52c2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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