californiascape.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8e:06:fb:fd:98:bc:68:9f:5f:c2:20:d8:67:01:0c:52:aa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=californiascape.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:06:fb:fd:98:bc:68:9f:5f:c2:20:d8:67:01:0c:52:aa
Serial Number (int): 309666237676090823577438226008732592788138
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:4f:06:93:fd:75:5c:bd:09:6e:ea:09:e3:0b:bc:db:a3:bf:fd:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:f4:28:85:c4:9b:4d:4b:fa:91:5f:b0:80:12:18:33:63:24:9a:0b
Fingerprint (sha256): ba:4f:17:18:0c:f2:e2:50:22:7f:00:73:40:0a:53:dc:6e:9b:cc:d4:02:6a:91:0c:a6:d8:3d:e1:e1:fe:7e:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate californiascape.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for californiascape.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

californiascape.com

Other certificates including the domain name californiascape.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for californiascape.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309666237676090823577438226008732592788138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 10:05:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 10:05:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'californiascape.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781764870383248829157451000959152060686576268000274655014630335006121861958126160304784999946454820920581128176648073438261552299884072239214656702969785605140042825152008024019325126340195398213301340543503659560675356023515526593830698445397313727465212299538194523123847443275328858948420870016722200610412635551075867450956942016134264173197430897309710012546846416148606709480164288795612367554531753148300616660262112118140432956772750101793625672079324781214772948765075840051249893496692341691050697649912554184308686211386329434989640460448403051859510575874480251995230358168696379661590818789150223891034694702194613019010377264236775170243425468803642597931412310259463408524226591062636630619452228231067020503807787593185595640809634741482598775663407270766797060050649644594286676974086642549162950000731512761266300623777738048502088944087430257046390030778800119226555286769434394228543137173829842874435223161701847342874596003720598780974843555036032775522614059242199102196032810561833201300583733930027811285975634183193729004623249129641782797738619216296600466618119845171346987105900122501108127649623567879791065633738603417199312545288733755729252068702605004340691317543676961299284333228916668456956417621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b4f0693fd755cbd096eea09e30bbcdba3bffdef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiascape.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbfa4ff73000004030047304502207b08f3d7052609b46f9e16c50bd2a832b02e6c69911a5473a1105835f00de62a022100dd01104ec0fddc770b041267298a684bbd44bb40c8bd75a257baa83ba5611f69007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbfa4ff3a000004030047304502201e4e54de572269c295eed77ef4252ed6977498b90bb69b9742505b74951df536022100e74d278ec15cd36ab046aee7a66ca671bccd7f351f614ec0e754300ea8e43e03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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