leafky.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:97:64:f2:24:51:f0:a7:f3:01:82:94:43:3d:bd:bc:48:cc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leafky.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:97:64:f2:24:51:f0:a7:f3:01:82:94:43:3d:bd:bc:48:cc
Serial Number (int): 399965961204179657920689105186063019428044
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:58:7a:ae:ea:df:3a:0a:53:05:4f:18:d4:8f:96:d1:c8:a6:bc:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:a4:d9:da:fd:75:4f:5f:96:58:27:ff:77:19:7d:b8:fb:0e:41:63
Fingerprint (sha256): bd:11:4d:0f:7d:bb:e5:53:f1:79:6c:9c:0a:10:50:05:86:75:ce:f7:f6:8c:ea:d5:20:96:db:07:c6:1d:6a:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leafky.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leafky.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leafky.com

Other certificates including the domain name leafky.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for leafky.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399965961204179657920689105186063019428044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 02:05:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 02:05:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leafky.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663928440862013568480566730999639397579379853749330316191801504281561275352948244905124847295450227267161075019917724939880858833651444897915875219390482776694118912864605137373235993661799241132565535215381023299677907799915064408232236690277226796734178931252750001120246855340953882440253193368853487497727067027591646445783460414558717425876502016294562330517253824126345060835933687250175203478858829613452409675024557475295719011203435313514462796623892848357213380628113165871839120006967216555378520980110938981670421856369751266534161284702610067681128869142528459633079087688393733895541495449271528963669046580826434516307082858454407625148939839722658025115984598417049916356867234396873315021197085356508243160769946638052405849639178154019956013711162045966853026765356198002644285346796287484450045666500429467900252909589223015896794097375291217162485022505047487399059076888397475854264582363959574953391546853415601625721573124605727016185277094308272182637529616406476920971877377630625887253379295483843831128852973710523378525266379714712584506810987190320077890628081668540248913002847438078823950490516100917162425925611411981652819270106908376986388069391204227188846118771648414771716023878427653261294532963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05587aaeeadf3a0a53054f18d48f96d1c8a6bcdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leafky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000168bb9e94ed0000040300483046022100b6a2840947831836d57014fd076bce005f4145bba8cd3f1cac9b18e9970127db022100a698129b5b68bb79f40863ed39ae2494529bc3d62b12a591dfac053264bd81d500770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168bb9e93850000040300483046022100f95f85ad2cb3bbddee2c1dc00c2934b6b45f4f60f95bfd72c6d999e1aa9616800221008bab8409df6732796740968faa19c65ac67b7faa116f60ab534f8066f5771f32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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