ruff.ly

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:31:1f:a6:c6:32:2a:33:2c:20:d9:1b:ff:3b:c1:61:0d:f6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ruff.ly

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:1f:a6:c6:32:2a:33:2c:20:d9:1b:ff:3b:c1:61:0d:f6
Serial Number (int): 278052765783446143705786731448207082065398
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:d9:15:1d:98:31:c5:d9:02:54:11:e7:ea:4c:fd:1d:d0:23:86:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:fa:13:a4:0b:40:61:c9:6d:0c:1e:7b:c0:5b:e9:e8:12:5d:a4:f8
Fingerprint (sha256): b8:9a:92:99:5d:0b:cc:4e:42:67:73:31:3a:a6:41:0a:da:3c:62:aa:0c:bd:17:ce:ff:16:0e:05:5c:f3:7d:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ruff.ly

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ruff.ly

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ruff.ly

Other certificates including the domain name ruff.ly

(limited to 100 certificates)
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly
ruff.ly

Certificate

The complete raw certificate details for ruff.ly in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JHee0Pa3LhYxHCWFhmG
V41dDt59u3nAYkV26ci3AZGqEDkp3FTRQ7V7mqVgpNP4UWMSTidUyvSWczLuKnvQ
8YTNofw6eQVt1nhFULte7tuWRIZbomChSKtV9LkfTXd5sUiU0ISA+qy6/wFm7LpA
4kTJjqOG1QM27g7qVo5S6SHNGKUDOyrrNPa4WgEV1eB7xICnl/1GHXm8DljzS6eI
AWDw5RrahvjISTd36yQPiqjwr/QXtwYsJvZYS61tSkNDZBkxLpbpefvM7G4fgYIn
nPP1lqk+c2Uchxkeo52elxl03d7cyEfaj22mpg3u7y8N+ilOO5IjNuwZ0XGy0SSm
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278052765783446143705786731448207082065398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-05 04:10:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 04:10:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ruff.ly'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28854264250771929235332730682522947973044289652960500061941401901691671191636600987820943605432695334299378976679721017412626571160070140768521014311094718929139934904118007345486499711122378901480343553276058978819365303178494573004474146297640589617089833377397331190491676119816943588766815972161451472420426466048967105162757503453683486215087645415102334797433636549090909226212452698369515967872753254155353736766445398500377862879255102885701350393901890149920996739165070481637267054378977170462100567607047416966116651844373267852378611024864891352510912217102288805971027973070697617922895493396138977175181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6cd9151d9831c5d9025411e7ea4cfd1dd0238621
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruff.ly'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016d9a538f240000040300483046022100cf4da54f8316f7e70e559bea02b597b107c1ca8e5260f2af70f68be6413ac2f8022100f4cc0ad0d98095a89ae1c937e76bc8ca18d5611c1debe61abf9bfc9c2c705e83007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d9a538f1a0000040300473045022052d34b55ac750a4c5489c987705bd8b12fd987d20d0e6ffbc2f36702c321e5dd022100c216cc8e19c9979ecfd54c800d985ce023c3377ad9e9b2fb0d0d71966f082cb5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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