mail.demetra.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:46:e0:7c:07:4d:0e:16:ac:ae:fb:52:6f:db:11:77:68 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.demetra.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:46:e0:7c:07:4d:0e:16:ac:ae:fb:52:6f:db:11:77:68
Serial Number (int): 312133142016299062276608784814075402090344
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:2f:4e:e0:c7:22:cf:ef:18:7f:a6:04:f4:11:36:da:f6:e4:55:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:e8:56:f6:88:f4:95:dd:58:c6:44:73:81:bd:9f:5a:ea:76:79:53
Fingerprint (sha256): b8:3f:69:58:60:89:9a:34:da:f6:5f:df:13:65:57:c2:06:3d:d6:64:10:c3:bd:f7:88:62:cb:97:4e:b4:9d:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail.demetra.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.demetra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.demetra.com

Other certificates including the domain name demetra.com

(limited to 100 certificates)
demetra.com
demetra.com
www.demetra.com
www.demetra.com
mail.demetra.com
mail.demetra.com
mail.demetra.com
mail.demetra.com
www.demetra.com
www.demetra.com
mail.demetra.com
demetra.com
www.demetra.com
www.demetra.com
www.demetra.com
demetra.com
www.demetra.com
mail.demetra.com
demetra.com
demetra.com
demetra.com
mail.demetra.com
mail.demetra.com
demetra.com
demetra.com
mail.demetra.com
www.demetra.com
demetra.com
mail.demetra.com
www.demetra.com
demetra.com
mail.demetra.com
www.demetra.com

Certificate

The complete raw certificate details for mail.demetra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziEkNp7Y4/FR5JZkSIZT
gRseKuUc738T8C56XudpQrZaA03G/Offl5TMvvWhzeBTWHrqfBLiVEAMqw+1PjxB
Ompi2o7CGduXuJzjPPphzgrI/1xFbWyjtbs9JAtFPbI0JfxH0bAItceEoSHLg6Ig
6C0acXshetYdjGrF4IHFdqoUsag2TXa0E7CILVv+5KO/609vmLgxlpjM1yN7AS/t
Xk4gG8nRcGO0c0aa9gHIU86Hzz89xLlhjdhVj8O6V+vmiktr5ctCL18uGIyP1tSr
sP+5TYRUW58rSh207X2b0Hh6gHzYPmU4wcjyFrK8Vnag8PHfFnU4T0mnhuV/9GTj
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312133142016299062276608784814075402090344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-21 04:00:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-21 04:00:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.demetra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26021433485265506643021617829256307327340231753409842719478574810677957540785286605015393986969826342790847224673888640745714871062996533019262043434284529076227998303142355470543841963720926193073384528136613855368070663431033636574123648762761139117133167568582759723714068249051895292074893726613067143279397732503414672928266844175365939522174630545261042733102819734875961877565549829685296899432833787007559188784954783046187676979835542062934423766161377528320350029336118758642095825913610291470510015236735810980845956332849278658943601184618598930801849183603834725804389190798230046109516071241515467596553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f42f4ee0c722cfef187fa604f41136daf6e45576
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.demetra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001686ec7dfef00000403004730450220553c42d531ddf24fc8d969f7ea8d86af4debfb05cd9cf57025955d4a11849b790221009f2706e5ec403841732d7b75518fedbba680c6f3fc4e40b9940775b98438253c00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001686ec7dff1000004030046304402203d772f1448d40ce9b1014f1184bd823139cf0b65e853d3f6339a19466fce49d602202f00f6494a662c046e7722740290bc57efa5bdaf3939fd675cd18318e8273682
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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