terramate.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:00:13:e3:ac:0a:ce:fd:e6:b9:71:b9:e0:25:a7:27:ca:04 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=terramate.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:13:e3:ac:0a:ce:fd:e6:b9:71:b9:e0:25:a7:27:ca:04
Serial Number (int): 261363295268018335060379196685715178506756
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:07:eb:6a:e3:84:1d:b4:09:ff:00:0d:0f:21:69:39:cf:12:97:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:66:b3:8f:84:af:7a:5e:83:7a:c5:98:64:db:e2:5b:03:63:e0:00
Fingerprint (sha256): be:e6:62:e6:d0:86:54:6c:55:3f:5b:7a:53:d2:ae:59:c1:fe:bf:aa:c7:a2:ff:ac:8f:24:b1:bd:a4:a8:72:93

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate terramate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for terramate.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

terramate.com

Other certificates including the domain name terramate.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for terramate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArxKultWk1MF2YJpg4Mpd
3nGNWVEPUO5jFG6JOZWv7SyNFXzMXDd1SoZfgCa2tkWDPi5nBv8DXbxib8i+JIVC
CGQBjtgd7lKat38VzcDC1BOGpKXomLAAlbyuJUpZS8ynEaQNHmXwb38L5HI/PCpW
PTGsELn92r8LPFL7b5Sj5ANHDlpRFmsDzWv/jocxI6ionJTYaTmXh/ZL7isiqmvI
H08XiIELwQBdP2dKabtnYw5YHiIQjnd966xpGM6hGu7iZnycWDb746pU4vpyfvFz
7Q2dTStJk1naWooWh14dFrcWelQbhRoa54v2rRNFAQZuzfEoL5qzjsAyVTF+zMe1
nxMAqBhFn4VZtBK+ZWZcXgRh1qjuZ72GrceCCeza5GU0CoRyiBUJTQDxw174ywaG
WdGB+Iz9Sj8rdxQhdcff2UYzDCyJB/HTTwkyNo3mVer6P9LVmNwC5TN5aZOwr0hs
ghhjhHFn2T1zyL4GYddWAsQZkCBjMoEWu859Isgf6/WkKnD9uGp9Xcz23YmI6rfI
SegIvxNeT2BWKYus55cmmty+yup2dN3g8Yqg7XLx1cIhM9liqTOthgVeM4GyFaUa
4ZSDGIkpLHxU2aFfbe8gbu/siwzsX7TDPUHDEfydvw3EzcI1VVw7SnRiAc3rPiLs
V11ya96uHrWu4ZKAHECbVxUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261363295268018335060379196685715178506756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 12:49:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 12:49:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'terramate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714235430129369707444917375020171321230276543911134766793417425940069172290503129967054477329362291535936367692603542221045957477710946653883753872390934032067875770560084503233051681982177057580640336129681666209443978095961551798979056454504072729509064851555125912437479368737651855930177889561559365840575332138269378235553155245235223213886650214990812627219430311659211943229694052194577132282440019544541928765532191750635773067373160848083219164829276627507494969351678563206196858979303333111362522198128000695872413052824510350032355054624106263538177946392932169359688577554003262925393821888528966911638261332983841945437714226697975513222532253560710636069924824198794493405229084195357049603720064006882124872104769727675965538468439118871772649067586674938909251752911590027288794727739032308262140876657608163930669836236366044397237736567932409213003834703815875906284050305540257002051065273281053963943749263751848039599488352671406650291735053115767611902374262144299671569366644557939925502913062401150349553343927541396030671491151240014990445897891557127752750347349143655791455648597093221410932319311730627464479135877970056331517950894466823748350013215536748820298388250893147919195204617376530802836985621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de07eb6ae3841db409ff000d0f216939cf129713
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terramate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016efa5f102700000403004730450220355d3df16ae3efb345108ca8002e664a50c36355a5f861d2f1726f95d4bb66b6022100abd4aee4e4c2803a8c88ea6db66533dfc5d16e859b3055db9548307f852e5e500075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016efa5f104c00000403004630440220485617524bf8f78983434ba66c177c30da67d015b72d41637f2055077b6b9bfb02207fa7cd11055a3d65b5d8079b7ef9d97d99a09ddc5e84bbe3de288643fab36d33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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