leafky.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:97:64:f2:24:51:f0:a7:f3:01:82:94:43:3d:bd:bc:48:cc was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=leafky.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:97:64:f2:24:51:f0:a7:f3:01:82:94:43:3d:bd:bc:48:ccSerial Number (int): 399965961204179657920689105186063019428044
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 05:58:7a:ae:ea:df:3a:0a:53:05:4f:18:d4:8f:96:d1:c8:a6:bc:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a9:a4:d9:da:fd:75:4f:5f:96:58:27:ff:77:19:7d:b8:fb:0e:41:63
Fingerprint (sha256): bd:11:4d:0f:7d:bb:e5:53:f1:79:6c:9c:0a:10:50:05:86:75:ce:f7:f6:8c:ea:d5:20:96:db:07:c6:1d:6a:ea
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate leafky.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for leafky.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
leafky.com
Other certificates including the domain name leafky.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for leafky.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgISBJdk8iRR8KfzAYKUQz29vEjMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMDUwMjA1NThaFw0x OTA1MDYwMjA1NThaMBUxEzARBgNVBAMTCmxlYWZreS5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQCiveO+S79PjTVUwNzWAXR4jB4cH1zNGu6DhvaY bzzeABnEcgrg1vE+EwDW3iAPteK80eGzeNoo7hMHG5QgbpidhwnsAAboM/WfA2LC C3kXNfP79TAu0UDrHzDsnHYlvT76CjSZeviOYhGWpdixV8Px/iZS+YizSJKOk/bH HsVMLiWVrMUcYpY5X9fea2pySC5zx18OuNygvR2h5jryG4PiPKmCToSk4y6Mch3g gb7RskqkmvD3iXlDkpCJMrO/Sil+7UdjDzMlQBpiLkYkfi24kbI7uKy99ZnCpXzd LW/3DNBew0MDj/JqzlFbpH0YQSJlv32xo5LOkJQ6xZAEg5cfaRNaKrZ29HemDdbR bW3vWnr/8PXZ9c0/lDVWdR+iNHa2W8Gnmx09ujwNWHqzT9Qsg+etrSrL9wqHCjJp mFQJ/OT5HR74pQvgrTW7Muc9W/1V5/P+aw2sJf2o2kNFhk5UeMF+rWN7WWGaAgEa ArJEgYB2dUzi2/UKknJZueDITFN681wnKMQHTr4UVeQejF4W5FKF3o/qU1SjO5t+ vr7CRNvf72jEysTag2+CRW1bDASJcieI/JDSGBJJsNu0GuBWP5bqx5fKGEFiTUbV 22TM4Y5JOq9psnerbHQOXxiuRGzDWddk8MAgqWLuO1oX4OZauL0MJu/S1EGf1QOv s9d5YwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQFWHqu6t86 ClMFTxjUj5bRyKa83zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCmxlYWZreS5jb20wTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwBV gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWi7npTtAAAEAwBIMEYC IQC2ooQJR4MYNtVwFP0Ha84AX0FFu6jNPxysmxjplwEn2wIhAKaYEptbaLt59Ahj 7TmuJJRSm8PWKxKlkd+sBTJkvYHVAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWm OLHHaFRL2I0AAAFou56ThQAABAMASDBGAiEA+V+FrSyzu93uLB3ADCk0trRfT2D5 W/1yxtmZ4aqWFoACIQCLq4QJ32cyeWdAlo+qGcZaxnt/qhFvYKtTT4Bm9XcfMjAN BgkqhkiG9w0BAQsFAAOCAQEAlD7ljraRxWK0+0u4OeRkZd9SOwyiegaXh8TvGoFj zUJSbyvV6PECcjzJGnS0Tpkr5LGnfnvxS+F0bsSvfNB2/Vc+pihyMAh0d2Dj20Us MkwrvUB6QZ5o3feU1adetVfSQ/Sln8AasLYNTDnkjwj16AUdEz/ngIRoHN1ubMj1 0hjTuArRKWyqqkaDB5RpreKYgE1dbH1L9jsW44OLvIHXeEGZXCAjZ6HjywMVNcC9 c5tdRLO0RYk+RmhE2JQ0toPFxOuLcuicVJ4LUC9it7OPRTTYmV70wrmdStAXwiiO EIsd9hDdoAVTYcq5XcW5FYak82LVKvYL4KO0oC0J6jC/tg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAor3jvku/T401VMDc1gF0 eIweHB9czRrug4b2mG883gAZxHIK4NbxPhMA1t4gD7XivNHhs3jaKO4TBxuUIG6Y nYcJ7AAG6DP1nwNiwgt5FzXz+/UwLtFA6x8w7Jx2Jb0++go0mXr4jmIRlqXYsVfD 8f4mUvmIs0iSjpP2xx7FTC4llazFHGKWOV/X3mtqckguc8dfDrjcoL0doeY68huD 4jypgk6EpOMujHId4IG+0bJKpJrw94l5Q5KQiTKzv0opfu1HYw8zJUAaYi5GJH4t uJGyO7isvfWZwqV83S1v9wzQXsNDA4/yas5RW6R9GEEiZb99saOSzpCUOsWQBIOX H2kTWiq2dvR3pg3W0W1t71p6//D12fXNP5Q1VnUfojR2tlvBp5sdPbo8DVh6s0/U LIPnra0qy/cKhwoyaZhUCfzk+R0e+KUL4K01uzLnPVv9Vefz/msNrCX9qNpDRYZO VHjBfq1je1lhmgIBGgKyRIGAdnVM4tv1CpJyWbngyExTevNcJyjEB06+FFXkHoxe FuRShd6P6lNUozubfr6+wkTb3+9oxMrE2oNvgkVtWwwEiXIniPyQ0hgSSbDbtBrg Vj+W6seXyhhBYk1G1dtkzOGOSTqvabJ3q2x0Dl8YrkRsw1nXZPDAIKli7jtaF+Dm Wri9DCbv0tRBn9UDr7PXeWMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 399965961204179657920689105186063019428044 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 02:05:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 02:05:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leafky.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663928440862013568480566730999639397579379853749330316191801504281561275352948244905124847295450227267161075019917724939880858833651444897915875219390482776694118912864605137373235993661799241132565535215381023299677907799915064408232236690277226796734178931252750001120246855340953882440253193368853487497727067027591646445783460414558717425876502016294562330517253824126345060835933687250175203478858829613452409675024557475295719011203435313514462796623892848357213380628113165871839120006967216555378520980110938981670421856369751266534161284702610067681128869142528459633079087688393733895541495449271528963669046580826434516307082858454407625148939839722658025115984598417049916356867234396873315021197085356508243160769946638052405849639178154019956013711162045966853026765356198002644285346796287484450045666500429467900252909589223015896794097375291217162485022505047487399059076888397475854264582363959574953391546853415601625721573124605727016185277094308272182637529616406476920971877377630625887253379295483843831128852973710523378525266379714712584506810987190320077890628081668540248913002847438078823950490516100917162425925611411981652819270106908376986388069391204227188846118771648414771716023878427653261294532963 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 05587aaeeadf3a0a53054f18d48f96d1c8a6bcdf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leafky.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000168bb9e94ed0000040300483046022100b6a2840947831836d57014fd076bce005f4145bba8cd3f1cac9b18e9970127db022100a698129b5b68bb79f40863ed39ae2494529bc3d62b12a591dfac053264bd81d500770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168bb9e93850000040300483046022100f95f85ad2cb3bbddee2c1dc00c2934b6b45f4f60f95bfd72c6d999e1aa9616800221008bab8409df6732796740968faa19c65ac67b7faa116f60ab534f8066f5771f32 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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