chuft.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:b5:da:ed:5b:7b:91:f4:6b:71:ca:f2:26:75:f0:ef:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chuft.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:b5:da:ed:5b:7b:91:f4:6b:71:ca:f2:26:75:f0:ef:9c
Serial Number (int): 295947103856426837074026380413910559813532
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:c0:c9:14:3f:87:ae:7a:98:a2:32:d4:d4:40:cf:a9:1e:6b:fb:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:05:2f:6e:1a:e6:20:c3:6c:c3:e8:ad:d5:49:82:b4:a1:9e:4e:55
Fingerprint (sha256): b7:0b:29:d4:69:29:63:1e:3a:29:8c:e2:27:d6:5e:5c:eb:dd:6a:6f:b0:49:e3:33:fe:ef:5c:f3:77:6e:a5:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chuft.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chuft.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chuft.com

Other certificates including the domain name chuft.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for chuft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295947103856426837074026380413910559813532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 04:04:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 04:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chuft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848750979167187013949808232089380608749683346008849572053047171022202656777006603430555813845371291600994607141990017428047450025322440040941500711919785898973060091939017933568665900636442687957576609784141096009440714865997537190260345365266778016085457435558445513908250277477750706941070505703427702170477228644855569974476761839675397299029047748818788725837923870211281972833589240709664120335812618420045994728158085911802166214369935214464993290907678680877656264146625253230183869670465260421207853576308085414403957469885723341820951535017451274582507966936978659297457943030477368623845660261630928161715896726478970908979910461553930124766149000790171734106970662237918538471400936013321959008560642791518606766950099985217675391984232349845134496559453758028230007175794949807669768443244967947411200772495007438208882264925428492870633479563831026897788434858888692282642523555369083945343036015892123723825225110084432280702640927011234228685254872893349176719123430767084988683489455880419597812277170713159005407444926555529070447035302693580703460519207024177026299853632452233128363524901365440711992767592124230977680797313299302525050266736169428985184878541823641681886596099533281831109503265759664454305288471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddc0c9143f87ae7a98a232d4d440cfa91e6bfbdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc3807d6800000403004730450220551a31f5429cc5655631a502432624197907bd40532897934823443b4f24e35e022100e577c818225c82bf8c03da7cce74c23b0441c75512c0e5bbdc25a8fbecf212be007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc3807d720000040300473045022016431be5c9341b68a8f6570f4548868d375b743d86de360b21bd681c1616243b022100dc44fd596bcd67635c5dba89c02900061b944f3757f43573594338c3ef1e52c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0090c16a6f0733b25c3d2455b5528c552e9fc00d5b2a772f21794cd77feb9fe39ce78bd8e5f2cdac08982c924942c5f3d318d6ca3c8b4ad7ae0031d98b6cba7de25fb43f859ab26d5db7c7481ed9e52ca8d8caf412e24bbaf23b692dd6439b5808c95d320565a0e5563e09270da507ff1d0786d2ab164397cece5fad5e2b284136ef91e633247e1032af8146f118e2b22578d0db30e04fc7cb89aefd2dacb54c8042fab372874ef46a64c7c36246058a1566590a0b22d9eb89861f88c2494d692725e99dd8fca9c4921de084cc1f71d7a9dd4594ac4ec799c590b60e7398eef0cad25c11186686e0b23b959c172d66d973a5618d128ec3a4b3a8f28891419f631d